API — Octant Commercial Intelligence

Authentication

Bearer tokens over TLS. Scoped keys per environment; webhooks signed with HMAC.

Endpoints

GET /api/search?q= — entity search

GET /api/report?lei=|ch=|oc= — report + score

POST /api/score — score a factor set

POST /api/dispute · POST /api/contact

GET /api/screen?name= — sanctions/PEP screening

POST /api/keys — mint an API key (admin)

Example

curl -H "Authorization: Bearer $KEY" \
  https://octant-ci.pages.dev/api/report?lei=5493000FXI1ENUWXQ410

{
  "score": 78,
  "band": "Low",
  "recommended_limit": 25000,
  "reasons": ["filed accounts current", "no liens on record"],
  "as_of": "2026-09-30"
}

Data sources

Identity & registration: GLEIF (live). Enrichment: Companies House, OpenCorporates. Screening: OpenSanctions. Every response field carries its origin in field_sources; scores are labeled modeled estimates.

Auth & metering

Send Authorization: Bearer <key> to draw on a plan quota. Without a key you get a free per-IP daily limit. Responses carry x-ratelimit-*; over-quota returns 429.