Skip to main content
Send requests to https://api.generalvalidation.com using the /api/v1 paths recorded in the OpenAPI document. Every request carries a Microsoft Entra token for the General Validation API. Read API authentication before you connect a service or managed identity.

The contract

The complete OpenAPI document is served at https://api.generalvalidation.com/openapi.json to any authenticated Reader. It records each operation’s required role, parameters, request body, and response schema, and it is the schema authority for this API. Tool clients that need a reduced projection of the same document can use https://api.generalvalidation.com/openapi-agent.json. This site does not repeat the per-endpoint contract; retrieve the document with the token your client will use.

Resource groups

Authoring and Run operations need Contributor; the OpenAPI document records the role for every operation. What the API does not do, and what it never returns, are described on API and automation.

Conventions

  • Idempotency: reuse an idempotency key only for an identical retry, and never infer success from a retry alone. See API and automation.
  • ETags: send the exact ETag you last read on every update that requires one; a stale ETag is refused. See API and automation.
  • Pagination: collections page with opaque cursors; pass each cursor back unchanged. See API and automation.
  • Rate limits: honor Retry-After when a response includes it. See API and automation.
  • Error codes: every error carries a fixed code and a request ID. See API and automation and Error codes.