Base URL
https://app.infimasecapis.com/v2
Ids
Ids are opaque strings. Treat them as stable but never derive meaning from them.
Timestamps
Timestamps are RFC 3339 in UTC and end in _at (2026-09-18T14:03:00Z). Dates without a time end in _on (2026-09-18).
Writes
POST creates, PATCH partially updates (only the fields you send change), DELETE removes. Send an Idempotency-Key header (any unique string, kept for 24 hours) on POST requests you might retry; a replay returns the original response, marked with Idempotent-Replayed: true, instead of creating a duplicate. Reusing a key for a different request returns 409, as does a retry sent while the first request is still running. Long-running actions return 202 Accepted with the ids of what they created, which you can then read. Every write is recorded in your partner account's audit log.