External API API

6 operations from the external ASIRI OpenAPI surface.

Public endpoint

POST`/v1/external/consent-events`

Submit a consent event from a customer website or app

Requiresconsent:write

Security

bearerAuthorization: Bearer <ASIRI_API_KEY>

Parameters

No path or query parameters.

Request body

application/jsonobject

Responses

POST/v1/external/consent-eventsPublic schema

curl --request POST \
  --url 'https://api.asiri.ng/v1/external/consent-events' \
  --header 'Authorization: Bearer <ASIRI_API_KEY>' \
  --header 'Content-Type: application/json' \
  --data '{
  "apiSubmissionId": "string",
  "noticeId": "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
  "subjectRef": "string",
  "noticeVersion": "string",
  "choices": {
    "key": true
  },
  "subjectChannel": "subject_id"
}'

Example response201

application/json

{
  "data": {
    "id": "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
    "apiSubmissionId": "string",
    "reviewStatus": "accepted",
    "payloadHash": "string",
    "duplicate": true
  }
}

Public endpoint

POST`/v1/external/dsr`

Submit a data subject request intake from an external form

Requiresdsr:write

Security

bearerAuthorization: Bearer <ASIRI_API_KEY>

Parameters

No path or query parameters.

Request body

application/jsonobject

Responses

POST/v1/external/dsrPublic schema

curl --request POST \
  --url 'https://api.asiri.ng/v1/external/dsr' \
  --header 'Authorization: Bearer <ASIRI_API_KEY>' \
  --header 'Content-Type: application/json' \
  --data '{
  "apiSubmissionId": "string",
  "requestType": "access",
  "requesterName": "string",
  "requesterEmail": "developer@example.com",
  "subjectEmail": "developer@example.com",
  "subjectRef": "string"
}'

Example response201

application/json

{
  "data": {
    "id": "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
    "apiSubmissionId": "string",
    "reviewStatus": "accepted",
    "payloadHash": "string",
    "duplicate": true
  }
}

Public endpoint

POST`/v1/external/evidence`

Submit external evidence into the ASIRI evidence vault

Accepts customer-submitted evidence, normalizes it, redacts raw payload secrets, stores a hash-verifiable vault snapshot, and maps it to controls when possible.

Requiresevidence:write

Security

bearerAuthorization: Bearer <ASIRI_API_KEY>

Parameters

No path or query parameters.

Request body

application/jsonobject

Responses

POST/v1/external/evidencePublic schema

curl --request POST \
  --url 'https://api.asiri.ng/v1/external/evidence' \
  --header 'Authorization: Bearer <ASIRI_API_KEY>' \
  --header 'Content-Type: application/json' \
  --data '{
  "apiSubmissionId": "string",
  "title": "string",
  "description": "string",
  "evidenceType": "attestation",
  "controlIds": [],
  "collectedAt": "2026-01-15T10:30:00.000Z"
}'

Example response201

application/json

{
  "data": {
    "id": "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
    "apiSubmissionId": "string",
    "title": "string",
    "type": "policy",
    "freshness": "current",
    "reviewStatus": "accepted"
  }
}

Public endpoint

POST`/v1/external/incidents`

Submit incident or breach intake evidence from external tooling

Requiresincidents:write

Security

bearerAuthorization: Bearer <ASIRI_API_KEY>

Parameters

No path or query parameters.

Request body

application/jsonobject

Responses

POST/v1/external/incidentsPublic schema

curl --request POST \
  --url 'https://api.asiri.ng/v1/external/incidents' \
  --header 'Authorization: Bearer <ASIRI_API_KEY>' \
  --header 'Content-Type: application/json' \
  --data '{
  "apiSubmissionId": "string",
  "title": "string",
  "severity": "medium",
  "occurredAt": "2026-01-15T10:30:00.000Z",
  "detectedAt": "2026-01-15T10:30:00.000Z",
  "description": "string"
}'

Example response201

application/json

{
  "data": {
    "id": "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
    "apiSubmissionId": "string",
    "reviewStatus": "accepted",
    "payloadHash": "string",
    "duplicate": true
  }
}

Public endpoint

GET`/v1/external/trust-center/status`

Read Trust Center publication status for customer portals

Requirestrust-center:read

Security

bearerAuthorization: Bearer <ASIRI_API_KEY>

Parameters

No path or query parameters.

Request body

No request body.

Responses

GET/v1/external/trust-center/statusPublic schema

curl --request GET \
  --url 'https://api.asiri.ng/v1/external/trust-center/status' \
  --header 'Authorization: Bearer <ASIRI_API_KEY>'

Example response200

application/json

{
  "data": {
    "published": true,
    "slug": "string",
    "url": "https://example.com",
    "widgetUrl": "https://example.com",
    "customDomain": "string",
    "customDomainUrl": "https://example.com"
  }
}

Public endpoint

PUT`/v1/external/vendors/{externalVendorId}`

Sync vendor or subprocessor evidence from an external system

Requiresvendors:write

Security

bearerAuthorization: Bearer <ASIRI_API_KEY>

Parameters

Name	In	Required	Schema	Description
`externalVendorId`	path	yes	`string`	-

Request body

application/jsonobject

Responses

PUT/v1/external/vendors/{externalVendorId}Public schema

curl --request PUT \
  --url 'https://api.asiri.ng/v1/external/vendors/{externalVendorId}' \
  --header 'Authorization: Bearer <ASIRI_API_KEY>' \
  --header 'Content-Type: application/json' \
  --data '{
  "name": "string",
  "apiSubmissionId": "string",
  "service": "string",
  "category": "string",
  "status": "monitoring",
  "criticality": "medium"
}'

Example response200

application/json

{
  "data": {
    "id": "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
    "apiSubmissionId": "string",
    "reviewStatus": "accepted",
    "payloadHash": "string",
    "duplicate": true
  }
}

External API API

POST/v1/external/consent-events

Security

Parameters

Request body

Responses

POST/v1/external/dsr

Security

Parameters

Request body

Responses

POST/v1/external/evidence

Security

Parameters

Request body

Responses

POST/v1/external/incidents

Security

Parameters

Request body

Responses

GET/v1/external/trust-center/status

Security

Parameters

Request body

Responses

PUT/v1/external/vendors/{externalVendorId}

Security

Parameters

Request body

Responses

POST`/v1/external/consent-events`

POST`/v1/external/dsr`

POST`/v1/external/evidence`

POST`/v1/external/incidents`

GET`/v1/external/trust-center/status`

PUT`/v1/external/vendors/{externalVendorId}`