Useful on day one. Replaceable by design.

Every operational object is tenant-scoped. Browser sessions use ChatGPT sign-in; server integrations use hashed bearer tokens.

Download OpenAPI 3.1 Health check

BASE URL

https://your-domain.example/api/v1

Authentication

Send a tenant key using the standard bearer scheme. Keys are shown only once and stored as SHA-256 hashes.

Authorization: Bearer el_live_••••••••

Webhooks

Outgoing payloads use timestamped HMAC-SHA256 signatures. Consumers should reject old timestamps and compare signatures in constant time.

MethodRoutePurpose

GET/api/v1/cases

List tenant-scoped incident cases

POST/api/v1/cases

Create a case and audit event

GET/api/v1/cases/{id}

Read a case, evidence and timeline

PATCH/api/v1/cases/{id}

Move through an allowed workflow state

POST/api/v1/cases/{id}/capture-links

Create a 24-hour collection link

GET/api/v1/capture/{token}

Resolve an active public capture flow

POST/api/v1/capture/{token}

Validate, hash and store evidence

GET/api/v1/cases/{id}/pack

Generate PDF, manifest and ZIP export

POST/api/v1/api-keys

Issue a tenant API key once

Create a case

curl https://your-domain.example/api/v1/cases \
  -H "Authorization: Bearer $EVIDENCELANE_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "incidentType": "Vehicle collision",
    "occurredAt": "2026-08-26T01:42:00Z",
    "location": "Parramatta, NSW",
    "vehicleRef": "VAN-042",
    "requiredEvidence": ["Scene overview", "Vehicle damage"]
  }'