Developers & API

The ASHR.work API

A read-only public API for product & module metadata. OpenAPI 3.1, a Swagger reference, RFC 9457 errors, cursor pagination, and X-Request-Id on every response. Anonymous-first — no key needed to read.

Interactive reference OpenAPI 3.1 (JSON)

Quickstart

Every endpoint is a plain GET. Base URL https://ashr.work/api.

# List available modules
curl -s https://ashr.work/api/v1/modules?status=available | jq

# One module
curl -s https://ashr.work/api/v1/modules/leave-management | jq

# Full capabilities manifest
curl -s https://ashr.work/api/v1/capabilities | jq

# With a Demystify API key (needed only for scoped endpoints)
curl -s -H "Authorization: Bearer dmk_live_..." https://ashr.work/api/v1/modules | jq

Endpoints

GET	/v1/health	Liveness check.
GET	/v1/capabilities	Full capabilities manifest (product, modules, surfaces).
GET	/v1/modules?status=available&limit=50	List modules (cursor-paginated).
GET	/v1/modules/{slug}	One module by slug.

API keys

Keys are dmk_live_ / dmk_test_, sent as a Bearer token, hashed at rest and revocable. The read API is anonymous; keys unlock scoped endpoints. Key issuance is rolling out via the Demystify developer portal.

Import anywhere

Point Postman, Insomnia, Swagger UI or Scalar at /api/openapi.json, or grab the Postman collection. For agents, see /for-agents and the MCP server.