Public API v1 directory

Developer APIs and tools

PolicyWatcher exposes a small anonymous, read-only integration surface for public evidence metadata, database-derived publication readiness, portable evidence collections, cross-cloud agent briefs and the curated Observatory registry. The contract keeps publication gates, review cadence and source limits visible to the system consuming it.

Inspect endpoints Open JSON manifest Build a collection Verify signatures Inspect continuity

Publication-aware

Published evidence remains behind the same public gates used by the dashboard.

Registry-aware

Observatory records identify their local curation mode and manual review timestamp.

Operations excluded

There is no route here for admin records, credentials, raw content or operational diagnostics.

Endpoints

Public endpoints

Seven machine endpoints and one continuity workbench. The seven API endpoints accept `GET`, permit cross-origin read access without credentials, and apply bounded public-data and rate policies. The browser-local continuity workbench calls only the published change-event feed after an explicit user action.

GET

Integration manifest

/api/v1/manifest

Lists the current public data sources, allowed parameters, evidence gates, cache window and API boundaries.

curl https://policywatcher.online/api/v1/manifest

Open endpoint

GET · AUTHORITATIVE · NO-STORE

Publication readiness

/api/v1/publication-readiness

Returns one database-derived aggregate metric with `Cache-Control: no-store`. Counts and the latest successful capture are exposed without policy text, internal identifiers or record-level detail.

configured → retrieved → baseline verified → public → analysed · latest capture

Open endpoint Open JSON Schema

GET

Observatory registry

/api/v1/observatory?lang=en

Returns localized sources, curated signals, scheduled events and the registry review context. Use `lang=it` for Italian.

curl "https://policywatcher.online/api/v1/observatory?lang=en"

Open endpoint

GET · AVAILABLE · INTRODUCED IN 3.9.0 BETA 17

Evidence collection bundle

/api/v1/evidence-collections

Resolves 1–12 canonical public change IDs into deterministic evidence bundles or a vendor-neutral human-review handoff. Personal titles, review states, assignees and due dates are never accepted.

?changes={id},{id}&format=handoff

Build a bounded request

GET · FORWARD POLLING

Published change events

/api/v1/change-events

Returns already-public policy change events with stable event IDs and an opaque forward cursor. It does not send notifications or confirm delivery.

?limit=25&lang=en&cursor={opaque}

Open event feed Open continuity lab

GET · READINESS CONTRACT

Webhook verification kit

/api/v1/webhook-verification-kit

Publishes the HMAC-SHA256 receiver contract, a public test-only vector and Node/Python examples. The public route does not register endpoints; a separate deployment-configured pilot can deliver eligible public events.

Open local verifier

GET · 8 FIXTURES

Receiver conformance suite

/api/v1/webhook-conformance-suite

Publishes eight deterministic positive and negative receiver cases covering every documented decision code. It does not test a live endpoint or delivery path.

Run locally

Enterprise pilot

Enterprise API v2

API v2 adds Microsoft Entra authentication, an allowlisted tenant claim, an Azure API Management policy and a Power Platform connector package. It remains read-only and does not replace v1.

OPENAPI

Agent Evidence Gateway

/api/v1/agent/openapi.json

Three flattened public operations for Microsoft 365 Copilot, Vertex AI Agent Builder and Amazon Quick source packages.

Open agent contract

OPENAPI

Enterprise API v2 contract

/api/v2/openapi.json

The contract is public; data routes require an Entra token with the expected tenant, audience and delegated scope or application role.

Open v2 contract

DECIDE

Integration options

/integrations

Compare API v1, the agent gateway, Enterprise API v2, Azure, Power Platform, Microsoft 365, Google Cloud, AWS, Word and planned private collaboration paths.

Choose a surface

Published source directory

The manifest describes the established public data routes too. It does not turn them into unrestricted database access.

SourceEvidence boundaryFreshnessPath

dashboardCompaniesPublic companies with gated policies and their latest public change.

public-policyPer request/api/companies

companyComparisonEvidence-gated company and industry KPI benchmark profiles.

public-changePer request/api/compare

marketPulsePaginated public policy-change event stream.

public-change60s TTL/api/changes

policyDetailsPublic policy detail with gated snapshots and public change analysis.

public-changePer request/api/policies/{policyId}

evidenceStatusAggregate inventory, latest retrieval state and current public KPI coverage without private content.

public-policyPer request/api/evidence-status

sourceSuspensionsSanitized metadata for sources withheld by publication gates.

public-suspension60s TTL/api/source-suspensions

sourceContinuitySanitized history of source retrieval and publication-state transitions.

public-suspension60s TTL/api/source-continuity

observatoryRegistryCurated public registry of governance, privacy, standards and event references.

public-reference300s TTL/api/v1/observatory

publicationReadinessAuthoritative database-derived configured-to-analysed readiness funnel and latest successful capture timestamp.

public-referencePer request/api/v1/publication-readiness

evidenceCollectionsDeterministic JSON, Markdown, CSV or vendor-neutral review handoff for up to 12 exact public change records.

public-change300s TTL/api/v1/evidence-collections

publicChangeEventsForward-only polling feed for already-published policy change events.

public-change60s TTL/api/v1/change-events

webhookVerificationKitVersioned receiver-verification contract, public test vector and implementation examples; no delivery service.

public-reference86400s TTL/api/v1/webhook-verification-kit

webhookConformanceSuiteEight deterministic positive and negative receiver cases; no endpoint or delivery test.

public-reference86400s TTL/api/v1/webhook-conformance-suite

riskTrendsChronological public risk-change observations with snapshot provenance.

public-change60s TTL/api/trends

kpiMatrixCross-company KPI aggregation over public policy evidence.

public-policy60s TTL/api/matrix

Operating note

API access models

Use API v1 for anonymous public reading and API v2 for a controlled Entra tenant pilot. The readiness kit and conformance suite let receivers test the candidate signature contract locally. Subscriptions, signed outbound delivery and write operations remain future roadmap work.

Compare integrations