Skip to content
AppArch AppArch Docs

API overview

The AppArch API has two faces: the Control plane (authentication, workspaces, packages, project registration) and the Report API (token-protected endpoints where the analyzer runners send their results).

Runner authentication

Section titled “Runner authentication”

Runners present a project-specific bearer token generated at project registration. The token is scoped to a single workspace + project + module and can be revoked from the Credential Manager.

POST /api/v1/reports
Authorization: Bearer apparch_proj_xxxxxxxx
Content-Type: application/json

Versioning

Section titled “Versioning”

The Report API is versioned under /api/v1/reports. Because runners cannot be hot-updated in the customer environment, this surface is kept stable across versions; runners are pinned to a major.

System info

Section titled “System info”

You can read the version and deployment mode anonymously:

GET /api/v1/system/info
→ { "version": "...", "deploymentMode": "SaaS", "serverTimeUtc": "..." }