{ "info": { "name": "Vitrio API v1", "description": "Generated from the live OpenAPI schema. Set the base_url and api_key variables.", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json" }, "variable": [ { "key": "base_url", "value": "https://your-vitrio-domain" }, { "key": "api_key", "value": "paste-your-key-here" } ], "item": [ { "name": "accounts", "item": [ { "name": "POST /accounts/change-password/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/change-password/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "change-password" ] }, "description": "Guards against brute-forcing old_password from a hijacked/stolen\naccess token: without a scoped throttle here, this endpoint only ever\nfell back to DRF's global UserRateThrottle (300/min) -- 300 password\nguesses a minute is not a meaningful limit. Same 'auth' scope\n(10/min) as LoginView/RegisterView/ForgotPasswordView.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /accounts/forgot-password/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/forgot-password/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "forgot-password" ] }, "description": "POST /api/forgot-password/ - Request password reset token", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /accounts/login/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/login/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "login" ] }, "description": "Mirrors accounts/views.py::login_view's IP + per-username lockout and\naudit logging -- this endpoint used to skip both entirely (and skip\n2FA), so an attacker could brute-force any account, including ones with\nTOTP enabled, purely through this path while the HTML login stayed\nfully protected. The ScopedRateThrottle alone ('auth', 10/min/IP) is\nnot a substitute: it's trivially beaten by rotating IPs and doesn't\nshare state across processes without REDIS_URL configured.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /accounts/logout/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/logout/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "logout" ] }, "description": "POST /api/logout/ - Logout user", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /accounts/me/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/accounts/me/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "me" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "GET /api/me/ - Get current logged-in user data" } }, { "name": "PUT /accounts/profile/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/profile/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "profile" ] }, "description": "PATCH /api/profile/ - Update user profile (name, email, phone, job title, image)", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /accounts/profile/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/profile/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "profile" ] }, "description": "PATCH /api/profile/ - Update user profile (name, email, phone, job title, image)", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /accounts/register/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/register/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "register" ] }, "description": "POST /api/accounts/register/ \u2014 creates a staff account in the calling\nlab_admin's own lab. This is NOT open self-serve signup: Vitrio's whole\nproduct model is that a company (Lab) and its first lab_admin are\nprovisioned by a system_admin (accounts/views.py::company_create), and\nthat lab_admin then adds their own team from inside the app \u2014 exactly\nwhat this endpoint is the API equivalent of. It used to be AllowAny with\na caller-supplied `role` field accepting any value including\nsystem_admin, which let an unauthenticated caller mint themselves a\nfully-privileged, cross-tenant account in one request \u2014 found and fixed\nalongside the rest of the REST API's documentation pass. `lab` is never\ntaken from the request; it's always the caller's own lab, same as\naccounts/views.py::staff_add, whose plan-tier staff-limit check this\nalso mirrors.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /accounts/reset-password/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/accounts/reset-password/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "accounts", "reset-password" ] }, "description": "POST /api/reset-password/ - Reset password with token", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "alerts", "item": [ { "name": "GET /alerts/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/alerts/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "alerts" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "GET /alerts/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/alerts/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "alerts", ":id" ] }, "description": "" } }, { "name": "POST /alerts/{id}/acknowledge/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/alerts/:id/acknowledge/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "alerts", ":id", "acknowledge" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /alerts/{id}/resolve/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/alerts/:id/resolve/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "alerts", ":id", "resolve" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "budgets", "item": [ { "name": "GET /budgets/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/budgets/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "budgets" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of budgets. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /budgets/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/budgets/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "budgets", ":id" ] }, "description": "Read-only list/detail of budgets. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "capas", "item": [ { "name": "GET /capas/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/capas/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records." } }, { "name": "POST /capas/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/capas/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas" ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /capas/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/capas/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas", ":id" ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records." } }, { "name": "PUT /capas/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/capas/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas", ":id" ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /capas/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/capas/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas", ":id" ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /capas/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/capas/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas", ":id" ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records." } }, { "name": "POST /capas/{id}/close/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/capas/:id/close/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas", ":id", "close" ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /capas/{id}/update-status/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/capas/:id/update-status/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "capas", ":id", "update-status" ] }, "description": "ai_pending_review CAPAs are excluded \u2014 same as capa_list, they're\nproposals awaiting human approval via the AI Suggestions queue\n(ai_insights/views.py), not yet real QMS records.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "connect", "item": [ { "name": "POST /connect/{id}/events/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/connect/:id/events/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "connect", ":id", "events" ] }, "description": "Signed completed operational runs with a separately approved category-specific recipe. Patient/order/specimen identifiers and unknown fields are forbidden. Shadow/review states do not deduct stock. An event retry preserves its database identity.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /connect/{id}/events/{event_id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/connect/:id/events/:event_id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "connect", ":id", "events", ":event_id" ] }, "description": "Credential-scoped processing state. Queued is not a committed stock deduction." } } ] }, { "name": "consumption-logs", "item": [ { "name": "GET /consumption-logs/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/consumption-logs/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "consumption-logs" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only: consumption logs are created via /log-consumption/ so inventory deduction always runs." } }, { "name": "GET /consumption-logs/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/consumption-logs/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "consumption-logs", ":id" ] }, "description": "Read-only: consumption logs are created via /log-consumption/ so inventory deduction always runs." } } ] }, { "name": "dashboard", "item": [ { "name": "GET /dashboard/stats/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/dashboard/stats/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "dashboard", "stats" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "GET /api/dashboard/stats/ \u2014 always scoped to the caller's own lab.\nRequires authentication: an anonymous caller has no lab to scope to, and\nfalling through to an unscoped platform-wide query would leak aggregate\nbusiness metrics (staff count, inventory volume, test throughput) across\nevery tenant, not just their own \u2014 see DashboardStatsAPITests." } }, { "name": "GET /dashboard/{role}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/dashboard/:role/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "dashboard", ":role" ] }, "description": "GET /api/dashboard// \u2014 returns dashboard data only when the user's role matches." } } ] }, { "name": "equipment", "item": [ { "name": "GET /equipment/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/equipment/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "equipment" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /equipment/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/equipment/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "equipment" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /equipment/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/equipment/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "equipment", ":id" ] }, "description": "" } }, { "name": "PUT /equipment/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/equipment/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "equipment", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /equipment/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/equipment/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "equipment", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /equipment/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/equipment/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "equipment", ":id" ] }, "description": "" } } ] }, { "name": "events", "item": [ { "name": "GET /events/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/events/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "events" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "The events a webhook can subscribe to, with what each one means -- for connector dropdowns and documentation." } } ] }, { "name": "goods-receipts", "item": [ { "name": "GET /goods-receipts/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/goods-receipts/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "goods-receipts" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of goods receipts. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /goods-receipts/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/goods-receipts/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "goods-receipts", ":id" ] }, "description": "Read-only list/detail of goods receipts. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "hmo-claims", "item": [ { "name": "GET /hmo-claims/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/hmo-claims/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "hmo-claims" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of hmo claims. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /hmo-claims/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/hmo-claims/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "hmo-claims", ":id" ] }, "description": "Read-only list/detail of hmo claims. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "ingest", "item": [ { "name": "POST /ingest/temperature/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/ingest/temperature/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "ingest", "temperature" ] }, "description": "POST one reading, or up to 100, to log them against storage locations.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "inventory", "item": [ { "name": "GET /inventory/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/inventory/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /inventory/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/inventory/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /inventory/bulk-adjust/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/inventory/bulk-adjust/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory", "bulk-adjust" ] }, "description": "POST /api/inventory/bulk-adjust/ \u2014 {\"reason\": \"...\", \"adjustments\":\n[{\"item_id\": 5, \"delta\": -3.5}, ...]} \u2014 the JSON equivalent of\ninventory/views.py::inventory_bulk_adjust's per-row form fields. Each\nadjustment writes an InventoryMovementLog row (movement_type='corrected'),\nsame as the web form. lab_admin-only, same access rule as the web form.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /inventory/bulk-import/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/inventory/bulk-import/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory", "bulk-import" ] }, "description": "POST /api/inventory/bulk-import/ \u2014 {\"items\": [{...}, ...]} \u2014 the JSON\nequivalent of inventory/views.py::inventory_bulk_import's CSV upload,\nfor scripted or ERP-integration use. Matches on name within the caller's", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /inventory/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/inventory/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory", ":id" ] }, "description": "" } }, { "name": "PUT /inventory/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/inventory/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /inventory/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/inventory/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /inventory/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/inventory/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "inventory", ":id" ] }, "description": "" } } ] }, { "name": "invoices", "item": [ { "name": "GET /invoices/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/invoices/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "invoices" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of invoices. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /invoices/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/invoices/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "invoices", ":id" ] }, "description": "Read-only list/detail of invoices. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "log-consumption", "item": [ { "name": "POST /log-consumption/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/log-consumption/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "log-consumption" ] }, "description": "POST /api/log-consumption/ \u2014 logs a test/emergency/manual consumption event and auto-deducts inventory.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "log-operational-usage", "item": [ { "name": "POST /log-operational-usage/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/log-operational-usage/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "log-operational-usage" ] }, "description": "POST /api/log-operational-usage/ \u2014 logs day-to-day usage of any item (gloves, paper, cleaning\nsupplies...) and auto-deducts inventory, without requiring a test recipe.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "maintenance-tickets", "item": [ { "name": "GET /maintenance-tickets/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/maintenance-tickets/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "maintenance-tickets" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /maintenance-tickets/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/maintenance-tickets/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "maintenance-tickets" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /maintenance-tickets/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/maintenance-tickets/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "maintenance-tickets", ":id" ] }, "description": "" } }, { "name": "PUT /maintenance-tickets/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/maintenance-tickets/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "maintenance-tickets", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /maintenance-tickets/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/maintenance-tickets/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "maintenance-tickets", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /maintenance-tickets/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/maintenance-tickets/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "maintenance-tickets", ":id" ] }, "description": "" } }, { "name": "POST /maintenance-tickets/{id}/close/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/maintenance-tickets/:id/close/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "maintenance-tickets", ":id", "close" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "operational-usage-logs", "item": [ { "name": "GET /operational-usage-logs/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/operational-usage-logs/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "operational-usage-logs" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only: logs are created via /log-operational-usage/ so inventory deduction always runs." } }, { "name": "GET /operational-usage-logs/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/operational-usage-logs/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "operational-usage-logs", ":id" ] }, "description": "Read-only: logs are created via /log-operational-usage/ so inventory deduction always runs." } } ] }, { "name": "purchase-requests", "item": [ { "name": "GET /purchase-requests/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /purchase-requests/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /purchase-requests/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id" ] }, "description": "" } }, { "name": "PUT /purchase-requests/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /purchase-requests/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /purchase-requests/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id" ] }, "description": "" } }, { "name": "POST /purchase-requests/{id}/approve/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/approve/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id", "approve" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /purchase-requests/{id}/order/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/order/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id", "order" ] }, "description": "Place the order for an approved request: body may carry supplier (id), po_number, expected_delivery (YYYY-MM-DD).", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /purchase-requests/{id}/reject/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/reject/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id", "reject" ] }, "description": "Optional 'comment' in the request body explaining why, same as approve/send_back.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /purchase-requests/{id}/resubmit/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/resubmit/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id", "resubmit" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /purchase-requests/{id}/send_back/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/send_back/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id", "send_back" ] }, "description": "Sends the request back to the requester for clarification without rejecting it outright.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /purchase-requests/{id}/withdraw/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/purchase-requests/:id/withdraw/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "purchase-requests", ":id", "withdraw" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "qc-levels", "item": [ { "name": "GET /qc-levels/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/qc-levels/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "qc-levels" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of qc control levels. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /qc-levels/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/qc-levels/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "qc-levels", ":id" ] }, "description": "Read-only list/detail of qc control levels. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "qc-results", "item": [ { "name": "GET /qc-results/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/qc-results/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "qc-results" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of qc results. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /qc-results/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/qc-results/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "qc-results", ":id" ] }, "description": "Read-only list/detail of qc results. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "recalls", "item": [ { "name": "GET /recalls/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/recalls/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "recalls" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of recall records. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /recalls/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/recalls/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "recalls", ":id" ] }, "description": "Read-only list/detail of recall records. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "sops", "item": [ { "name": "GET /sops/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/sops/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /sops/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/sops/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /sops/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/sops/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops", ":id" ] }, "description": "" } }, { "name": "PUT /sops/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/sops/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /sops/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/sops/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /sops/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/sops/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops", ":id" ] }, "description": "" } }, { "name": "POST /sops/{id}/acknowledge/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/sops/:id/acknowledge/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops", ":id", "acknowledge" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /sops/{id}/approve/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/sops/:id/approve/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops", ":id", "approve" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /sops/{id}/new_version/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/sops/:id/new_version/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "sops", ":id", "new_version" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "specimens", "item": [ { "name": "GET /specimens/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/specimens/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "specimens" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of specimens. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /specimens/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/specimens/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "specimens", ":id" ] }, "description": "Read-only list/detail of specimens. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "stock-adjustments", "item": [ { "name": "GET /stock-adjustments/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/stock-adjustments/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "stock-adjustments" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Stock adjustments are append-only and always go through inventory.services.adjust_stock: the row\nused to be a bare record that changed no quantity at all, and could be edited or deleted afterwards.\nA change big enough to clear the lab's thresholds comes back with approval_status='pending' and is\napplied only once someone other than the requester approves it." } }, { "name": "POST /stock-adjustments/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/stock-adjustments/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "stock-adjustments" ] }, "description": "Stock adjustments are append-only and always go through inventory.services.adjust_stock: the row\nused to be a bare record that changed no quantity at all, and could be edited or deleted afterwards.\nA change big enough to clear the lab's thresholds comes back with approval_status='pending' and is\napplied only once someone other than the requester approves it.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /stock-adjustments/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/stock-adjustments/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "stock-adjustments", ":id" ] }, "description": "Stock adjustments are append-only and always go through inventory.services.adjust_stock: the row\nused to be a bare record that changed no quantity at all, and could be edited or deleted afterwards.\nA change big enough to clear the lab's thresholds comes back with approval_status='pending' and is\napplied only once someone other than the requester approves it." } } ] }, { "name": "stock-counts", "item": [ { "name": "GET /stock-counts/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/stock-counts/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "stock-counts" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of stock counts. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /stock-counts/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/stock-counts/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "stock-counts", ":id" ] }, "description": "Read-only list/detail of stock counts. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "stock-movements", "item": [ { "name": "GET /stock-movements/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/stock-movements/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "stock-movements" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "GET /stock-movements/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/stock-movements/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "stock-movements", ":id" ] }, "description": "" } } ] }, { "name": "storage-locations", "item": [ { "name": "GET /storage-locations/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/storage-locations/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "storage-locations" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of storage locations. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /storage-locations/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/storage-locations/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "storage-locations", ":id" ] }, "description": "Read-only list/detail of storage locations. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "suppliers", "item": [ { "name": "GET /suppliers/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/suppliers/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "suppliers" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /suppliers/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/suppliers/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "suppliers" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /suppliers/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/suppliers/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "suppliers", ":id" ] }, "description": "" } }, { "name": "PUT /suppliers/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/suppliers/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "suppliers", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /suppliers/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/suppliers/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "suppliers", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /suppliers/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/suppliers/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "suppliers", ":id" ] }, "description": "" } } ] }, { "name": "temperature-excursions", "item": [ { "name": "GET /temperature-excursions/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/temperature-excursions/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "temperature-excursions" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of temperature excursions. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /temperature-excursions/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/temperature-excursions/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "temperature-excursions", ":id" ] }, "description": "Read-only list/detail of temperature excursions. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "temperature-readings", "item": [ { "name": "GET /temperature-readings/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/temperature-readings/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "temperature-readings" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of environmental readings. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /temperature-readings/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/temperature-readings/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "temperature-readings", ":id" ] }, "description": "Read-only list/detail of environmental readings. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "test-templates", "item": [ { "name": "GET /test-templates/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/test-templates/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-templates" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /test-templates/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/test-templates/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-templates" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /test-templates/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/test-templates/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-templates", ":id" ] }, "description": "" } }, { "name": "PUT /test-templates/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/test-templates/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-templates", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /test-templates/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/test-templates/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-templates", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /test-templates/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/test-templates/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-templates", ":id" ] }, "description": "" } } ] }, { "name": "test-types", "item": [ { "name": "GET /test-types/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/test-types/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-types" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "" } }, { "name": "POST /test-types/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/test-types/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-types" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /test-types/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/test-types/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-types", ":id" ] }, "description": "" } }, { "name": "PUT /test-types/{id}/", "request": { "method": "PUT", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/test-types/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-types", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "PATCH /test-types/{id}/", "request": { "method": "PATCH", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/test-types/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-types", ":id" ] }, "description": "", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "DELETE /test-types/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/test-types/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "test-types", ":id" ] }, "description": "" } } ] }, { "name": "token", "item": [ { "name": "POST /token/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/token/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "token" ] }, "description": "Mirrors accounts/views.py::login_view's IP + per-username lockout and\naudit logging -- this endpoint used to skip both entirely (and skip\n2FA), so an attacker could brute-force any account, including ones with\nTOTP enabled, purely through this path while the HTML login stayed\nfully protected. The ScopedRateThrottle alone ('auth', 10/min/IP) is\nnot a substitute: it's trivially beaten by rotating IPs and doesn't\nshare state across processes without REDIS_URL configured.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "POST /token/refresh/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/token/refresh/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "token", "refresh" ] }, "description": "Takes a refresh type JSON web token and returns an access type JSON web\ntoken if the refresh token is valid.", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } } ] }, { "name": "waste-disposals", "item": [ { "name": "GET /waste-disposals/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/waste-disposals/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "waste-disposals" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Read-only list/detail of waste disposal records. Supports ?modified_after= and pagination at /api/v1/." } }, { "name": "GET /waste-disposals/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/waste-disposals/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "waste-disposals", ":id" ] }, "description": "Read-only list/detail of waste disposal records. Supports ?modified_after= and pagination at /api/v1/." } } ] }, { "name": "webhook-subscriptions", "item": [ { "name": "GET /webhook-subscriptions/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/webhook-subscriptions/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "webhook-subscriptions" ], "query": [ { "key": "page_size", "value": "100", "disabled": true }, { "key": "modified_after", "value": "2026-01-01T00:00:00Z", "disabled": true, "description": "Only rows created or changed after this moment." } ] }, "description": "Subscribe / unsubscribe a URL to an event. Lab admins and managers only (the same people who can do it in the app)." } }, { "name": "POST /webhook-subscriptions/", "request": { "method": "POST", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" }, { "key": "Content-Type", "value": "application/json" }, { "key": "Idempotency-Key", "value": "{{$guid}}", "disabled": true, "description": "Enable to make a retried request safe: the first response is replayed." } ], "url": { "raw": "{{base_url}}/api/v1/webhook-subscriptions/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "webhook-subscriptions" ] }, "description": "Subscribe / unsubscribe a URL to an event. Lab admins and managers only (the same people who can do it in the app).", "body": { "mode": "raw", "raw": "{}", "options": { "raw": { "language": "json" } } } } }, { "name": "GET /webhook-subscriptions/{id}/", "request": { "method": "GET", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/webhook-subscriptions/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "webhook-subscriptions", ":id" ] }, "description": "Subscribe / unsubscribe a URL to an event. Lab admins and managers only (the same people who can do it in the app)." } }, { "name": "DELETE /webhook-subscriptions/{id}/", "request": { "method": "DELETE", "header": [ { "key": "Authorization", "value": "Api-Key {{api_key}}" }, { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{base_url}}/api/v1/webhook-subscriptions/:id/", "host": [ "{{base_url}}" ], "path": [ "api", "v1", "webhook-subscriptions", ":id" ] }, "description": "Subscribe / unsubscribe a URL to an event. Lab admins and managers only (the same people who can do it in the app)." } } ] } ] }