Developer guide
The field application API.
The browser uses same-origin JSON endpoints under /api/field/. A current workspace session is required for private resources. Cross-origin cookie access is not enabled.
Core routes
| Resource | Operations |
|---|---|
state | GET workspace snapshot |
projects | POST create · PATCH update with version |
media | POST multipart upload · GET protected file · PATCH metadata |
messages | POST project or photo comment |
tasks | POST create · PATCH completion with version |
documents | POST create · PATCH edit with version |
shares | POST selected-file gallery · DELETE revoke |
jobs | POST report/translation · GET status |
Request safety
Mutations validate inputs and organization membership. File uploads require an Idempotency-Key header. Edits include a version and return a conflict when the record has changed.
Integration availability
API-key authentication and external integrations are not enabled. The API hostname exposes a health endpoint; authenticated browser workflows use the application host.