Partner Read · Early Access

API reference

This downloadable OpenAPI is not the full Arbiter customer API.

Public scope: Partner Read under /api/v1 (contractVersion: arbiter.partner.v1) plus a declared early-access slice (policies, controls, risks, assets, OSCAL export). Authenticate with Authorization: Bearer arb_…. The full customer catalog (evidence, incidents, SoA, CAPAs, …) is documented when signed in under Settings → API & MCP documentation. Maturity: Integration Surfaces · Disclosure Boundary.

Live try-it is off — copy the examples into your client. Partners building an external OS should start with Partner Read, not the unversioned UI paths.

For signed push/ack webhooks (policy, control, risk, coverage, remediation), see Webhooks and download the Partner Sync Events contract (arbiter.partner.events.v1). Event payloads are metadata-only; fetch bodies and artifacts via Partner Read.

Use the left operation list to select an endpoint. Tags start collapsed — expand a resource group (Controls, Partner Read, …) to browse methods.

Loading OpenAPI contract…