Tristar API Documentation

These pages provide endpoint-focused documentation for the Tristar API v2 controllers. Each operation page includes request schema, expected response schema, JSON samples, validation notes, and a link back to Swagger.

Authentication And Tenant Resolution

Most endpoints require Authorization: Bearer {token} plus tenant resolution through a tenant subdomain or the X-Api-Key header. The API key goes in the header, not in clientCode. Contacts obtain a token from Auth/Token. Employees obtain a token from Employee/SignIn using Server check-in credentials. Anonymous authentication endpoints still participate in tenant resolution unless explicitly exempted by middleware.

See Authentication for the header flow and curl examples.

Guides

Endpoint Groups