Authentication

Bearer tokens, workspace context, and request conventions.


Protected API endpoints require an OAuth access token.

curl https://api.epismo.ai/v1/packs/search \
  -H "authorization: Bearer $TOKEN" \
  -H "content-type: application/json" \
  -d '{"type":"context","query":"onboarding"}'

Read endpoints require read scopes. Mutation endpoints require write scopes.

Workspace context

Supported /v1 endpoints accept workspaceId as a query parameter.

curl "https://api.epismo.ai/v1/projects?workspaceId=<workspace-id>" \
  -H "authorization: Bearer $TOKEN"

If omitted, the request uses the token's default context or personal space.

Request conventions

  • Send JSON bodies with content-type: application/json.
  • Dates use YYYY-MM-DD.
  • Create and update calls use scope.
  • Search calls use scopes.
  • Updates use PATCH semantics unless documented otherwise.