Skip to main content
The reference runtime exposes a non-normative product API at /platform/v1. It powers marketer workflows without changing the portable transaction contract at /lip/v1.
Customer sign-in remains external. A BFF validates OIDC and maps the subject to an opaque member_id. Location-scoped credentials fail closed because the platform API currently returns tenant-wide customer data.

Surface

Every route requires Bearer authentication. viewer can read; writes require platform:write. CSV imports are limited to 1 MiB and 1,000 rows, require unique allowlisted headers, and reject ambiguous row widths and prototype-like attribute keys. See the separate Platform API reference and the repository source guide.