Docs

Read. Export. Verify.

The API reads solved decisions, pulls deliverables, and signs every webhook. Decisions themselves are created in the product.

auth.sh

# Authenticate with a bearer key
curl https://mongeflow.com/api/v1/decisions \
  -H "Authorization: Bearer mf_live_xxxxxxxxxxxxxxxxx"

Authentication

Keys are mf_live_ and mf_test_ bearers, hashed at rest. Create and revoke them in the dashboard.

Decisions

GET /api/v1/decisions lists solved decisions; GET /api/v1/analyses/{id} returns one with includes for scenarios, actions, outcomes, and alerts.

Exports

POST /api/v1/exports with an analysis_id and one of eight formats; poll or subscribe to export.ready.

Webhooks

Every event signed with HMAC-SHA256 in X-Mongeflow-Signature. Verify before trusting.

Rate limits

30, 120, or 600 requests per minute by plan, with X-RateLimit headers on every response.

OpenAPI

The full schema is published at /api/v1/openapi.json (OpenAPI 3.1).

The full reference, with request and response shapes for every endpoint, lives in the developer documentation.