Documentation Index
Fetch the complete documentation index at: https://docs.finpace.tech/llms.txt
Use this file to discover all available pages before exploring further.
API conventions
Authentication and authorization
All external API calls are expected to use:- OAuth 2.0 or OIDC for delegated access
- mTLS for high-trust server integrations
- scoped bearer tokens for application access
- explicit service principals for machine-to-machine integrations
Idempotency
The following operations must require anIdempotency-Key header:
- payment initiation
- account opening
- posting instruction submission
- credit application submission
- drawdown booking
- document upload registration
- AI governed tool execution for state-changing commands
Maker-checker and approval pattern
For protected actions, Finpace uses a staged command model.- Client submits a command
- Platform validates syntax and entitlement
- Command enters
pending_approvalif approval is required - Approval actors can approve, reject, or return for amendment
- The command is executed only after the control profile is satisfied
- Execution evidence is attached to the originating command record
Eventing
Events are emitted for:- arrangement state changes
- posted transactions
- payment status changes
- document lifecycle actions
- task status changes
- credit decision events
- covenant breach detection
- AI tool evaluation and execution outcomes
Event design rules
- immutable payload
- event id
- causation id
- correlation id
- occurred timestamp
- tenant id
- actor context
- business object reference
Error model
The API error model uses a machine-readable structure:Versioning
This package uses path-stable resources and additive evolution principles:- avoid breaking field renames
- add optional fields first
- deprecate with notice
- isolate behavioral changes behind policy or capability flags where possible