ContentsHide contents

REST reference

Base path /v1. Bearer tokens; DPoP is required for service clients. Every response carries Autonym-Version: 1.0 and RateLimit-* headers. Responses are application/autonym+json.

GET/v1/grantRead the grant this token holds: domains, levels, purpose, expiry.any

GET/v1/domainsList the domains the grant may read, and at what level.any read scope

GET/v1/contextRead granted domains at or below the granted level. Safety-critical entries come first.autonym:read:*

GET/v1/context/{domain}Read one domain. Supports ETags.autonym:read:{domain}:*

POST/v1/me/grants/{id}/revokeRevoke a grant immediately.autonym:manage

GET/v1/me/logRead the append-only log of reads and changes.autonym:manage

Query parameters for `/v1/context`

domains (required, comma-separated), max_level, keys, declared_only, min_confidence, since. since returns only entries changed after the given timestamp and is honoured only for tokens holding autonym:persist.

Caching

/v1/context/{domain} responses carry an ETag. Send If-None-Match to avoid counting an unchanged read.

Example

Illustrative, not a schema-validated fixture. The host is the service, not a subdomain per person: the handle identifies the record, the origin does not.

http

GET /v1/context?domains=dining,accessibility&max_level=L1 HTTP/1.1
Host: autonym.me
Authorization: DPoP eyJ...
DPoP: eyJ...
Accept: application/autonym+json