API reference

Browser → POST /api/auth/sign-in → Session cookie set
       → Subsequent requests include session cookie automatically

const session = await getSession()    // Returns null if not authenticated
const orgId = getOrgId(session)       // Extracts active organization ID

curl -X POST /api/examinations \
  -H "Content-Type: application/json" \
  -d '{"type": "regulatory", "examiner": "FDIC", "responseDeadline": "2026-03-15"}'

curl -X POST /api/examinations/EX-2026-001/upload \
  -F "file=@request-letter.pdf"

GET /api/knowledge-base/browse?domain=bsa_aml&limit=20&offset=0
GET /api/mras?status=open,remediation_in_progress

{
  "data": {
    "examination": {
      "id": "EX-2026-001",
      "name": "Q1 BSA Examination",
      "status": "in_progress"
    }
  }
}

{
  "data": {
    "examinations": [...]
  }
}

{
  "error": {
    "code": "NOT_FOUND",
    "message": "Examination not found"
  }
}