{"name":"SpendRule API","description":"API for SpendRule tenant, dashboard, contracts, vendors, and related data.","version":"0.1.0","endpoints":{"root":"GET / — this info","health":"GET /health — health check","provision":"POST /api/auth/provision — JIT-provision user after SSO login (API key required)","tenants":"GET /api/tenants — list tenants","dashboard":"GET /api/tenants/:tenantId/dashboard","invoices":"GET /api/tenants/:tenantId/invoices","invoiceDetail":"GET /api/tenants/:tenantId/invoices/:invoiceId","invoiceFile":"GET /api/tenants/:tenantId/invoices/:invoiceId/file","contracts":"GET /api/tenants/:tenantId/contracts","contractFile":"GET /api/tenants/:tenantId/contracts/:contractId/file","exceptions":"GET /api/tenants/:tenantId/exceptions","vendors":"GET /api/tenants/:tenantId/vendors","me":"GET /api/me — current user (auth required)","myTenants":"GET /api/me/tenants — my organizations (auth required)","members":"GET /api/tenants/:tenantId/members — list members (auth + tenant member)","roles":"GET /api/tenants/:tenantId/roles — list roles","invitations":"GET/POST /api/tenants/:tenantId/invitations","ssoConnection":"GET /api/sso/connection?domain= — SSO available for domain (public)","ssoAdminPortal":"GET /api/sso/admin-portal?tenantId=&intent=sso|dsync&returnUrl= — WorkOS Admin Portal redirect","ssoConnections":"GET /api/sso/connections?tenantId= — list SSO connections","webhook":"POST /api/webhooks/workos — WorkOS webhook (signature verified)"},"ids":"Invoice, vendor, and contract IDs use INV-, VEND-, CONTR- + UUID v5 (tenant namespace). Lookups accept these or legacy id/slug."}