Overview

mcom ERP public API 1

The published subset of the mcom ERP API. Generated from the marked operations of api/openapi.yaml; do not edit. Within a major version only additive change is made: clients must ignore unknown response fields and unknown webhook event types. A refusal carries a stable code (or, for a generic refusal, the problem type slug); each response lists its possible values in x-codes.

Information

OpenAPI version: 3.0.3

Authentication

apiKeyAuth

An API key, mck_<key_id>_<secret>, sent as a bearer token. Created by an administrator under Integrations and shown once. A key may call only the operations marked x-public-api, and holds at most what its owner holds, narrowed to the scopes chosen when it was created. A missing, wrong, expired or revoked key is answered by the same 401.

Security scheme type: http

bearerAuth

The access token returned by login, refresh or switch-org. Short-lived (15 minutes) and checked on every request against the live session, the member’s active status and the organization’s permission version, so a valid signature alone does not make a token usable.