The OptiTech API lets you manage OptiTech programmatically. You can read control status, manage frameworks, pull evidence and reports, push findings, run compliance checks, manage vendors, and more. Everything you can do in the OptiTech Console, you can do with the API.
Browse endpoints below, start with Get started, download the OpenAPI spec, or load api.md as AI context.
Search and browse all endpoints
Use the endpoint index to search every generated API operation, or browse by resource below.
163 endpoints across 18 resources
Search endpoint indexCreate, manage, and delete OptiTech programs
Activate, manage, and cross-map frameworks
Connections that collect evidence from your systems
Team authentication configuration and user management
Manage org members, API keys, network access, and spending
Create and revoke API keys
Current user details and org membership
List supported EU hosting regions
Query plan status and usage
Track async operation status
Point-in-time program snapshots for audits
RESTful access to your program
Generated API endpoints for Legacy Auth.
Manage document buckets and objects
Inspect document storage state
Retrieve program AI copilot endpoints
Issue and revoke scoped program credentials
Manage automated checks and deployments
Learn more
Get started
Create an API key, authenticate requests, and read your control status with curl.
Key concepts
Understand asynchronous operations, rate limits, pagination, and important constraints.
OpenAPI spec
Download the OpenAPI 3.0 specification for code generation and tooling.
Related interfaces
If you don't need to call the REST API directly, use one of these interfaces instead.