Integrations
Integration modules (e.g. SAP/ERP connectors) are enabled per org and gated by scoped permission grants. Base path: /api/org/{slug}/integrations.
Enable / disconnect a module
Section titled “Enable / disconnect a module”| Method · Route | Source |
|---|---|
POST /{moduleKey}/enable | IntegrationModuleEnabledEndpoints.cs:54 |
DELETE /{moduleKey}/enable | :55 |
GET /enabled | List enabled modules — :39 |
Paid connector add-ons are bought through the one add-on door, POST /api/org/{slug}/settings/addons/{addonKey} (credit debit, 402, Pro+ floor, owner gate). There is no separate per-module purchase route.
Reading what a connector sends (setup wizard)
Section titled “Reading what a connector sends (setup wizard)”| Method · Route | Purpose | Source |
|---|---|---|
GET /verified-connectors | Connectors that have delivered a signed event (the “connected” mark) | :40 |
GET /{moduleKey}/connection-status | Current connection state | :41 |
GET /{moduleKey}/inbound-preview · /fields | Sample of inbound payloads and the fields seen, for mapping without typing | :42, :44 |
GET /{moduleKey}/hierarchy-preview · /org-structure · /org-structure/members | The connector’s org tree (skeleton with head-counts; members per unit fetched lazily) | :43, :45, :46 |
POST /{moduleKey}/org-structure/materialize | Create the whole tree as Axowl units in one call (Owner/Admin) | :47 |
GET /{moduleKey}/event-types | Event types actually received | :48 |
GET · POST /{moduleKey}/notarize-scopes | Which inbound events are sealed into the audit chain (separate from RBAC) | :49, :50 |
Inbound data itself arrives at /api/org/{slug}/inbound (InboundEndpoints.cs:28). Org structure is never auto-synced; the tree is materialized only on an explicit call.
Access requests
Section titled “Access requests”A customer requests access to a provider’s integration; the provider approves/denies.
| Method · Route | Role | Source |
|---|---|---|
POST · GET /{moduleKey}/request | customer (create / status) | IntegrationAccessRequestEndpoints.cs:36, :37 |
GET /api/org/{slug}/access-requests | provider (list) | :44 |
POST /api/org/{slug}/access-requests/{id}/approve · /deny | provider | :45, :46 |
Permission grants
Section titled “Permission grants”| Method · Route | Purpose | Source |
|---|---|---|
POST /{moduleKey}/permissions/analyze | Analyze scope conflicts | IntegrationPermissionGrantEndpoints.cs:36 |
POST /{moduleKey}/permissions/grant | Grant scoped permissions | :37 |
POST /{moduleKey}/ai/translate-scope | AI scope translation | IntegrationsAiEndpoints.cs:23 |
Granted permissions flow through the same RBAC model — see Permission scopes.