API reference

The public Cloudflare Worker API - authentication, error shape, request ids, and the machine-readable contract.

link to this sectionAPI reference

The public API is served by the api-edge worker. The machine-readable contract is apps/api-edge/openapi.json (62 paths). The complete generated endpoint table lives at API endpoints, guarded by CI against drift.

link to this sectionBase URL and authentication

Production base URL: https://api.evimesh.com.
Public reads are unauthenticated.
Signed-in writes forward a Supabase JWT; machine access uses API tokens

with explicit scopes.

link to this sectionErrors

Errors return a JSON body with code, message, and a request_id. Quote the request id when reporting a problem - it ties the failure to the server-side trace without exposing user data.

Example shape (illustrative):

json

{ "code": "not_found", "message": "route not found", "request_id": "…" }

link to this sectionPointers

List endpoints return items plus an optional nextCursor for opaque

cursor pagination.

Relations (evidence links, receipt findings) live on detail endpoints,

not list rows - hydrate per object.

Generate a typed client from openapi.json with @evimesh/sdk-ts.