Developers

Build with OptiTrust APIs.

Find the API reference, webhook contract, upload flow, and tenant setup entry points used by client integrations.

Developer links

API requests use tenant API keys in the XApiKey header. Generate keys in the tenant dashboard, then use Swagger and the bundle guide to wire the integration.

Integration operating contract

Plan testing and traffic before going live.

Contact Us to discuss non-production testing and access options.

The application currently has an in-process global limiter of 600 requests per minute, partitioned by the remote IP observed by the application. Because it is global, it also applies to authenticated API calls. Requests rejected by the limiter receive HTTP 429.

Statement bundle upload flow

Create a bundle, request a signed upload target, send PDF bytes to blob storage, complete the file attachment, and receive lifecycle callbacks.

Read the bundle guide

Webhook signatures

Validate signed bundle events with HMAC-SHA256, handle retries idempotently, and inspect delivery history on bundle responses.

Verify webhook signatures

API keys and tenant setup

Sign in to your tenant dashboard to create, update, or revoke API keys before calling authenticated endpoints.

Sign in to manage keys

LLM integration skill

Give this Markdown file to an AI coding assistant so it can implement the OptiTrust API flow with the correct upload, webhook, signing, and authentication rules.

Open the skill file