API Documentation

Bedrock provides a REST API for submitting advice documents, tracking review workflows, and retrieving tamper-proof certificates. Standard JSON over HTTPS with API key authentication.

Authentication

All requests require an API key passed in the X-API-Key header. Keys are scoped to a single firm.

Webhooks

Configure webhooks to receive real-time notifications as records are written and reviews complete.

Request API access Download OpenAPI spec

Endpoints

4 endpoint groups covering the Ledger, Principal, and Firm APIs.

Firm

7 endpoints

Get current firm

Get firm statistics

/v1/firm/me/backup-status

Get backup status

GET

/v1/firm/me/api-keys

List API keys

GET

/v1/firm/me/webhooks

List webhooks

POST

/v1/firm/me/webhooks

Create webhook

DELETE

/v1/firm/me/webhooks/{webhookId}

Delete webhook

Ledger

6 endpoints

Create record

List records

/v1/ledger/records/{recordId}

Get record

GET

/v1/ledger/certificates

List certificates

GET

/v1/ledger/certificates/{certificateId}/url

Get certificate URL

POST

/v1/ledger/certificates/{certificateId}/verify-chain

Verify certificate chain

Principal

3 endpoints

Submit job

List jobs

/v1/principal/jobs/{jobId}

Get job

Public

1 endpoint

POST

/v1/public/certificates/verify

Verify certificate

Health

Service health check.

GET/health

Health check

Check API health status

Responses

200API is healthy

Field	Type	Required	Description
`status`	string	No

Example

cURL

curl -X GET "https://api.bedrockledger.com/health" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

Firm

Manage your firm profile, API keys, and webhook configurations.

GET/v1/firm/me

Get current firm

Responses

200Current firm details

Field	Type	Required
`id`	string	No
`name`	string	No
`createdAt`	string(date-time)	No
`updatedAt`	string(date-time)	No

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/firm/me" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/firm/me/stats

Get firm statistics

Responses

200Firm statistics

Field	Type	Required
`recordCount`	integer	No
`certificateCount`	integer	No
`jobCount`	integer	No

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/firm/me/stats" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/firm/me/backup-status

Get backup status

Responses

200Backup status with spot checks

Field	Type	Required
`isHealthy`	boolean	No
`certifiedAt`	string(date-time)	No
`nextCheckAt`	string(date-time)	No
`spotChecks`	object[]	No

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/firm/me/backup-status" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/firm/me/api-keys

List API keys

Responses

200List of API keys

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/firm/me/api-keys" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/firm/me/webhooks

List webhooks

Responses

200List of webhooks

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/firm/me/webhooks" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

POST/v1/firm/me/webhooks

Create webhook

Request body

Field	Type	Required	Description
`url`	string(uri)	Yes
`events`	string[]	Yes

Responses

201Webhook created

Field	Type	Required
`id`	string	No
`firmId`	string	No
`url`	string(uri)	No
`events`	string[]	No
`createdAt`	string(date-time)	No
`deactivatedAt`	string(date-time)	No

Example

cURL

curl -X POST "https://api.bedrockledger.com/v1/firm/me/webhooks" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key" \
  -d '{
    "url": "https://example.com",
    "events": []
  }'

DELETE/v1/firm/me/webhooks/{webhookId}

Delete webhook

Parameters

Parameter	In	Type	Required	Description
`webhookId`	path	string	Yes

Responses

200Webhook deleted

Example

cURL

curl -X DELETE "https://api.bedrockledger.com/v1/firm/me/webhooks/{webhookId}" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

Ledger

Submit advice documents, query records, and manage certificates.

POST/v1/ledger/records

Create record

Request body

Field	Type	Required
`eventType`	string	Yes
`actorId`	string	Yes
`actorFcaRef`	string	No
`actorName`	string	No
`documentHash`	string	Yes
`documentMetadata`	object	Yes

Responses

201Record created

Field	Type	Required
`id`	string	No
`firmId`	string	No
`eventType`	string	No
`actorId`	string	No
`actorFcaRef`	string	No
`actorName`	string	No
`documentHash`	string	No
`documentMetadata`	object	No
`certificateId`	string	No
`createdAt`	string(date-time)	No

Example

cURL

curl -X POST "https://api.bedrockledger.com/v1/ledger/records" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key" \
  -d '{
    "eventType": "example_eventType",
    "actorId": "example_actorId",
    "actorFcaRef": "example_actorFcaRef",
    "actorName": "example_actorName",
    "documentHash": "example_documentHash",
    "documentMetadata": {}
  }'

GET/v1/ledger/records

List records

Parameters

Parameter	In	Type	Required	Description
`skip`	query	integer	No
`take`	query	integer	No

Responses

200List of records

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/ledger/records" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/ledger/records/{recordId}

Get record

Parameters

Parameter	In	Type	Required	Description
`recordId`	path	string	Yes

Responses

200Record details

Field	Type	Required
`id`	string	No
`firmId`	string	No
`eventType`	string	No
`actorId`	string	No
`actorFcaRef`	string	No
`actorName`	string	No
`documentHash`	string	No
`documentMetadata`	object	No
`certificateId`	string	No
`createdAt`	string(date-time)	No

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/ledger/records/{recordId}" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/ledger/certificates

List certificates

Parameters

Parameter	In	Type	Required	Description
`skip`	query	integer	No
`take`	query	integer	No

Responses

200List of certificates

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/ledger/certificates" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/ledger/certificates/{certificateId}/url

Get certificate URL

Parameters

Parameter	In	Type	Required	Description
`certificateId`	path	string	Yes

Responses

200Certificate download URL

Field	Type	Required	Description
`url`	string(uri)	No
`expiresAt`	string(date-time)	No

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/ledger/certificates/{certificateId}/url" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

POST/v1/ledger/certificates/{certificateId}/verify-chain

Verify certificate chain

Parameters

Parameter	In	Type	Required	Description
`certificateId`	path	string	Yes

Responses

200Certificate chain verification result

Field	Type	Required	Description
`isValid`	boolean	No
`chain`	object[]	No

Example

cURL

curl -X POST "https://api.bedrockledger.com/v1/ledger/certificates/{certificateId}/verify-chain" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

Principal

Submit advice for review and track review job progress.

POST/v1/principal/jobs

Submit job

Request body

Field	Type	Required	Description
`description`	string	Yes
`data`	object	Yes

Responses

201Job created

Field	Type	Required
`id`	string	No
`firmId`	string	No
`description`	string	No
`data`	object	No
`status`	string	No
`assignedTo`	string	No
`createdAt`	string(date-time)	No
`updatedAt`	string(date-time)	No

Example

cURL

curl -X POST "https://api.bedrockledger.com/v1/principal/jobs" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key" \
  -d '{
    "description": "example_description",
    "data": {}
  }'

GET/v1/principal/jobs

List jobs

Parameters

Parameter	In	Type	Required
`skip`	query	integer	No
`take`	query	integer	No
`status`	query	string	No

Responses

200List of jobs

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/principal/jobs" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

GET/v1/principal/jobs/{jobId}

Get job

Parameters

Parameter	In	Type	Required	Description
`jobId`	path	string	Yes

Responses

200Job details

Field	Type	Required
`id`	string	No
`firmId`	string	No
`description`	string	No
`data`	object	No
`status`	string	No
`assignedTo`	string	No
`createdAt`	string(date-time)	No
`updatedAt`	string(date-time)	No

Example

cURL

curl -X GET "https://api.bedrockledger.com/v1/principal/jobs/{jobId}" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key"

Public

Endpoints that require no authentication.

POST/v1/public/certificates/verify

Verify certificate

Request body

Field	Type	Required	Description
`certificateId`	string	Yes

Responses

200Certificate verification result

Field	Type	Required
`isValid`	boolean	No
`certificateHash`	string	No
`issuedAt`	string(date-time)	No

Example

cURL

curl -X POST "https://api.bedrockledger.com/v1/public/certificates/verify" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: bk_live_your_api_key" \
  -d '{
    "certificateId": "example_certificateId"
  }'

Ready to integrate?

Import the OpenAPI spec into Postman, Bruno, or any API client. Request early access to start building.

Request API access Download OpenAPI spec