Skip to main content

Base URL

All endpoints are prefixed with /api/v1.

Authentication

All endpoints require a valid API key in the X-API-Key header. See Authentication for details.

Endpoints

Status Codes

Idempotency

The ESA Check endpoint is idempotent based on the application_id field. Submitting the same application_id with updated data will refresh the results for that application rather than creating a duplicate. This makes it safe to retry requests or update application details.

Rate Limiting

API requests are rate limited to ensure fair usage. If you exceed the limit, you will receive a 429 Too Many Requests response. Contact support if you need a higher rate limit for your integration.