API reference

All client traffic goes to api.fincompliances.info over TLS. Responses are JSON.

Fetch the current manifest

GET /api/v1/controls/manifest HTTP/1.1
Host: api.fincompliances.info
Accept: application/json, text/plain, */*
X-Requested-With: XMLHttpRequest

Returns the control set currently in scope. Clients poll this on their configured interval; /api/v1/policy/current and /api/v1/schedule/next return the policy document and the next scheduled collection window.

File evidence

POST /api/v1/submissions HTTP/1.1
Host: api.fincompliances.info
Content-Type: application/json

{"evidence":"<encoded payload>","schema":"v1"}

Submissions are accepted up to 512 KB. Larger artefacts should be chunked by the client.

Status codes

Code	Meaning
200	Accepted
304	Manifest unchanged
413	Submission too large
429	Polling interval too aggressive

Session

The client session is carried in the fc_sid cookie and rotates on each collection cycle.