https://api.generalvalidation.com using the /api/v1 paths
recorded in the OpenAPI document. Every request carries a Microsoft Entra
token for the General Validation API. Read
API authentication before you connect a service or
managed identity.
The contract
The complete OpenAPI document is served athttps://api.generalvalidation.com/openapi.json to any authenticated Reader.
It records each operation’s required role, parameters, request body, and
response schema, and it is the schema authority for this API. Tool clients
that need a reduced projection of the same document can use
https://api.generalvalidation.com/openapi-agent.json. This site does not
repeat the per-endpoint contract; retrieve the document with the token your
client will use.
Resource groups
Authoring and Run operations need Contributor; the OpenAPI document records
the role for every operation. What the API does not do, and what it never
returns, are described on API and automation.
Conventions
- Idempotency: reuse an idempotency key only for an identical retry, and never infer success from a retry alone. See API and automation.
- ETags: send the exact ETag you last read on every update that requires one; a stale ETag is refused. See API and automation.
- Pagination: collections page with opaque cursors; pass each cursor back unchanged. See API and automation.
- Rate limits: honor
Retry-Afterwhen a response includes it. See API and automation. - Error codes: every error carries a fixed code and a request ID. See API and automation and Error codes.