This page documents what’s confirmed from the current API collection. The
data field’s contents are still being documented per endpoint — see the note in API Overview.Response envelope
Every endpoint returns the same top-level shape (confirmed from a live capture againstGET /api/v1/core/asset/{assetId}):
timestamp and correlation_id were confirmed on one endpoint (GET /api/v1/core/asset/{assetId}) and are assumed to be a shared response-wrapper convention across the API. That assumption will be confirmed or corrected as more endpoints are captured.List, filter, sort, and search
Endpoints that return a collection (typically named.../list) accept a consistent request body rather than query parameters:
Some list endpoints take extra body fields on top of these, for example
asset_id and category on the metric view list, or id and type on the audit log list. These are shown in the example on each endpoint’s page.Filter objects
Each item infilters narrows the result set on one column:
The Prizm web app also sends
isDefault and filterType (for example card or nav) on filters that come from its built-in cards and navigation. These describe how the filter was created in the UI and are not needed for API calls. The full list of columns and operators per endpoint is not yet documented.Paginated list responses
For collection endpoints (.../list), data itself wraps the array plus pagination metadata — confirmed across 30+ live list endpoints:
Some collection endpoints (
GET /api/v1/integration, GET /api/v1/notification/list’s sibling GET /api/v1/notification) return the array directly as data, without the data.data wrapper. Check the specific endpoint’s reference page for which shape it uses.Status codes
A couple of endpoints in the source collection redirect (
307) to a trailing-slash form of the same path, and one documented as POST (/api/v1/governance/field-property) returned 405 Method Not Allowed live against both spellings. POST /api/v1/governance/product/{productId}/output-port returned 500 against a real product ID during capture. These look like small inconsistencies or bugs between the Postman collection and the live API — noted here rather than silently corrected or hidden, since they haven’t been confirmed with the API owners yet.Error response body
Error responses keep thesuccess, message, timestamp and correlation_id fields of the normal envelope. success is false, data is not returned, and these fields are added:
Error codes observed so far:
For
401 responses, see Authentication.
Validation error (422)
The following response is returned when field/tabs-by-level is called without its required level field:
Not found (404)
400, 403 and 409 responses are not documented because they have not been observed. This table will be extended as more error codes are confirmed.