OpenAPI 3.1. Signed. Idempotent. Versioned.
Use the SDK when it fits, the REST surface when it doesn't. Either way you get the same auth, idempotency, signed-webhook and tenant-isolation guarantees — and a machine-readable spec you can vendor into your CI.
X-API-Key: slt_live_AbCdEfGh…
X-Idempotency-Key: 8e0c…b21
Content-Type: application/json
{
"dataset_id": "ds_4a7c81",
"model": "synthesize",
"rows": 10000,
"seed": 42
}X-Job-Id: job_9b3df1
X-Rate-Limit-Remaining: 47
Retry-After: —
{
"job_id": "job_9b3df1",
"status": "queued",
"estimate": { "credits": 14, "seconds": 38 },
"evidence": { "expected_root_pending": true },
"_links": {
"self": "/v1/synthesize/jobs/job_9b3df1",
"stream": "/v1/synthesize/jobs/job_9b3df1/events",
"cancel": "/v1/synthesize/jobs/job_9b3df1:cancel"
}
}- Routes
- 206
- Spec
- OAS 3.1
- Webhook sig
- HMAC-SHA256
- Idempotency
- 24 h
Six things every endpoint guarantees.
OpenAPI 3.1, machine-readable
The schema that drives the SDK is generator-ready — customers with API access vendor it into their CI to auto-generate clients.
Scoped auth
JWT for end-users, API keys for service-to-service. Read / generate / admin scopes.
Idempotency built in
The Idempotency-Key header is stored 24 h; safe retry on transient 5xx without duplicate work.
Per-tenant + per-route limits
A token bucket per tenant + per route returns 429 with Retry-After and a reset hint.
Signed webhooks
HMAC-SHA256 signature header + a per-tenant rolling key + a 5-minute replay window.
Versioned, deprecation-aware
v1 stable; deprecations announced 90 days in advance with an X-Sunset header on retired routes.
Signed by default. Replay-window enforced.
Every webhook payload is HMAC-SHA256-signed with a rolling per-tenant key and a timestamp. Verify with one helper, ignore the noise of unauthenticated traffic.
- 01SLT signs payloadcryptographic hash(payload || ts || rolling_key)→ X-SLT-Signature
- 02Webhook deliveredPOST your endpoint with headers→ X-SLT-Event
- 03You verifyverify(payload, sig, key)→ ts within ±5 min
- 04Process if ok, 401 if notno signature → reject silently→ replay-protected
Nine groups. One contract.
Datasets
POST /v1/datasets/upload
Upload, browse, profile, delete.
Mock
POST /v1/mock/jobs
Schema-from-prompt synthesis.
Synthesize
POST /v1/synthesize/jobs
Training and generation jobs.
Agent
POST /v1/agent/projects
Autonomous agent runs with cost gates.
SCADA
POST /v1/scada/runs
Virtual SCADA telemetry runs.
ICS
POST /v1/ics/scenarios
Attack-mix scenario execution.
Connectors
POST /v1/connectors/{id}/browseBrowse + import from 14 source types.
Evidence
GET /v1/evidence/{job_id}Sealed bundle download + offline verify hint.
Webhooks
POST /v1/webhooks
Subscribe to events, signed payloads.
A stable error envelope. No surprises.
Body fails JSON-Schema check; a per-field error array is returned.
No JWT / API key; or token expired.
Token authenticated but lacks the required scope.
Resource not found within the calling tenant.
Same Idempotency-Key seen with a different body.
Returns Retry-After + a per-route reset window.
Always JSON, never HTML; a correlation ID for support.
Dependency timeout; safe to retry on idempotent verbs.
Posture & auditability.
TLS 1.2+ only
HSTS on every response; older suites refused at the LB.
Tenant isolation
The JWT carries tenant_id; an ORM filter is applied on every query.
Audit log
Every write recorded with caller, scope, and a SHA-256 of the body.
Stable error envelope
Every error returns {error, code, correlation_id, hint}.
Sign up. Get a key. Hit the API.
Free-tier credits ship with every account. Mint a key in your workspace, drop the contract-test runner into your CI, and wire RadMah AI into a real data plane in an afternoon.