API reference

The Dokaz REST API is versioned under /v1. The machine-readable OpenAPI 3.1 document is at /openapi.json.

Authentication

Create an API key on the API keys page, then send it as a bearer token. The examples below are identical requests — pick the one for your shell.

macOS / Linux (bash, zsh)

curl https://app.dokaz.net/v1/drills -H "Authorization: Bearer so_your_key_here"

Windows (PowerShell)

curl.exe https://app.dokaz.net/v1/drills -H "Authorization: Bearer so_your_key_here"

In PowerShell, curl is an alias for Invoke-WebRequest, which does not accept -H. Call curl.exe to use the real curl, or use the native cmdlet:

Invoke-RestMethod https://app.dokaz.net/v1/drills -Headers @{ Authorization = "Bearer so_your_key_here" }

Conventions

Every response is a { data, meta, errors } envelope.
List endpoints paginate with an opaque cursor; follow meta.next_cursor.
POST requests require an Idempotency-Key header; a repeated key replays the original response.
Rate limit: 60 requests per minute per account; over the limit returns 429 with Retry-After.

Endpoints

Method	Path	Description
GET	/v1/databases	List database targets
POST	/v1/databases	Register a database target
GET	/v1/databases/{id}	Get a database target
GET	/v1/drills	List drills
POST	/v1/drills	Start a drill
GET	/v1/drills/{id}	Get a drill with steps + assertions
GET	/v1/drills/{id}/evidence	Download the signed evidence PDF