API Reference

Base URL: https://api.buildpathio.com/v1 — all requests require a Bearer token in the Authorization header.

Authentication

API tokens are scoped to a workspace. Find your token under Settings → API Tokens in the dashboard.

Manifests

POST /manifests

Submit a service manifest. Call this from CI on every commit that touches the service's contracts or dependency list. Idempotent by service + version.

Request body

GET /manifests/{service}

Retrieve the latest manifest for a named service.

DELETE /manifests/{service}

Remove a service manifest from the graph. Use when decommissioning a service. Downstream dependents will receive a WARNING on their next check until they remove the dependency from their own manifests.

Graph queries

GET /graph

Returns the full dependency graph for the workspace as a JSON object with nodes[] and edges[]. Suitable for visualization or auditing.

GET /graph/impact/{service}

Returns all services downstream of {service}, their ownership, and the nature of the dependency (HTTP contract / gRPC / event). This is what the CI check calls before annotating a PR.

Impact analysis

POST /check

Run a point-in-time impact check for a proposed manifest change. Useful for previewing risk before pushing. Returns breaking[], warning[], and unaffected[] downstream services.

Rate limits: 300 requests/minute on Starter, 1 500/minute on Pro, 6 000/minute on Team. Manifest pushes are not rate-limited on any plan.