REST API for NexusLaw 360

Every HTTP endpoint the application exposes, grouped by resource.

Calling the API

The API is served from the same address as the application, under /api. Requests carry the session cookie issued at sign-in, so a browser session and an API call are the same identity and obey the same permissions.

Every state changing request (POST, PUT, PATCH, DELETE) must also carry this application family's presence header, or it is refused with 403 bad request. That refusal reads like a permissions fault but is not one. Integration and APIs lists the header per family.

Endpoints

134 endpoints in 44 resource groups.

accounts · ai · ap-bills · api · audit · clients · connect · currencies · custom-domain · dashboard · documents · findash · intakes · invoices · journals · kb · login · logout · matters · me · next-number · nxdocs · nxdocs-file · nxtz · offices · password · payments · perms · practice-groups · push · reports · search · sender-domains · sender-emails · sender-options · sender-prefs · sso · staff · tasks · tax-rates · time · trust · username · users

accounts 1

Method	Path	Access
GET	`/api/accounts`	signed in

ai 2

Method	Path	Access
POST	`/api/ai/ask`	signed in
GET	`/api/ai/status`	signed in

ap-bills 3

Method	Path	Access
GET	`/api/ap-bills`	signed in
POST	`/api/ap-bills`	signed in
POST	`/api/ap-bills/:id/pay`	signed in

api 3

Method	Path	Access
GET	`/api/`	signed in
POST	`/api/`	signed in
PUT	`/api/`	signed in

audit 1

Method	Path	Access
GET	`/api/audit`	signed in

clients 3

Method	Path	Access
GET	`/api/clients`	signed in
POST	`/api/clients`	signed in
PUT	`/api/clients/:id`	signed in

connect 25

Method	Path	Access
GET	`/api/connect/connections`	signed in
POST	`/api/connect/connections`	signed in
DELETE	`/api/connect/connections/:id`	signed in
PUT	`/api/connect/connections/:id`	signed in
POST	`/api/connect/connections/:id/call`	signed in
POST	`/api/connect/connections/:id/test`	signed in
GET	`/api/connect/hooks`	signed in
POST	`/api/connect/hooks`	signed in
DELETE	`/api/connect/hooks/:id`	signed in
PUT	`/api/connect/hooks/:id`	signed in
GET	`/api/connect/hooks/:id/events`	signed in
GET	`/api/connect/log`	signed in
GET	`/api/connect/meta`	signed in
GET	`/api/connect/subs`	signed in
POST	`/api/connect/subs`	signed in
DELETE	`/api/connect/subs/:id`	signed in
PUT	`/api/connect/subs/:id`	signed in
POST	`/api/connect/subs/:id/test`	administrator
GET	`/api/connect/tokens`	signed in
POST	`/api/connect/tokens`	signed in
DELETE	`/api/connect/tokens/:id`	signed in
PUT	`/api/connect/tokens/:id`	signed in
POST	`/connect/hook/:slug`	signed in
GET	`/connect/mcp`	signed in
POST	`/connect/mcp`	signed in

currencies 2

Method	Path	Access
GET	`/api/currencies`	signed in
PUT	`/api/currencies/:code`	signed in

custom-domain 3

Method	Path	Access
GET	`/api/custom-domain`	signed in
PUT	`/api/custom-domain`	signed in
POST	`/api/custom-domain/verify`	signed in

dashboard 1

Method	Path	Access
GET	`/api/dashboard`	signed in

documents 2

Method	Path	Access
GET	`/api/documents`	signed in
POST	`/api/documents`	signed in

findash 1

Method	Path	Access
GET	`/api/findash`	signed in

intakes 4

Method	Path	Access
GET	`/api/intakes`	signed in
POST	`/api/intakes`	signed in
POST	`/api/intakes/:id/conflict-check`	signed in
POST	`/api/intakes/:id/decide`	signed in

invoices 7

Method	Path	Access
GET	`/api/invoices`	signed in
GET	`/api/invoices/:id`	signed in
POST	`/api/invoices/:id/email`	signed in
POST	`/api/invoices/:id/issue`	signed in
GET	`/api/invoices/:id/ledes`	signed in
POST	`/api/invoices/:id/validate`	signed in
POST	`/api/invoices/prebill`	signed in

journals 3

Method	Path	Access
GET	`/api/journals`	signed in
POST	`/api/journals`	signed in
GET	`/api/journals/:id`	signed in

kb 2

Method	Path	Access
GET	`/api/kb`	signed in
POST	`/api/kb`	signed in

Method	Path	Access
POST	`/api/login`	public
POST	`/api/login/2fa`	public

logout 1

Method	Path	Access
POST	`/api/logout`	signed in

matters 6

Method	Path	Access
GET	`/api/matters`	signed in
POST	`/api/matters`	signed in
GET	`/api/matters/:id`	signed in
PUT	`/api/matters/:id`	signed in
GET	`/api/matters/:id/ai-summary`	signed in
POST	`/api/matters/:id/rate`	signed in

me 4

Method	Path	Access
GET	`/api/me`	signed in
POST	`/api/me/password`	signed in
GET	`/api/me/profile`	signed in
PUT	`/api/me/profile`	signed in

next-number 1

Method	Path	Access
GET	`/api/next-number`	signed in

nxdocs 2

Method	Path	Access
GET	`/api/nxdocs/:kind/:ref`	signed in
POST	`/api/nxdocs/:kind/:ref`	signed in

nxdocs-file 2

Method	Path	Access
DELETE	`/api/nxdocs-file/:id`	signed in
GET	`/api/nxdocs-file/:id`	signed in

nxtz 3

Method	Path	Access
GET	`/api/nxtz`	signed in
PUT	`/api/nxtz`	signed in
POST	`/api/nxtz/device`	signed in

offices 2

Method	Path	Access
GET	`/api/offices`	signed in
POST	`/api/offices`	signed in

password 2

Method	Path	Access
POST	`/api/password/forgot`	public
POST	`/api/password/reset`	signed in

payments 4

Method	Path	Access
GET	`/api/payments`	signed in
POST	`/api/payments`	signed in
POST	`/api/payments/:id/reassign`	signed in
POST	`/api/payments/:id/void`	signed in

perms 2

Method	Path	Access
GET	`/api/perms/catalog`	signed in
GET	`/api/perms/resolved`	administrator

practice-groups 2

Method	Path	Access
GET	`/api/practice-groups`	signed in
POST	`/api/practice-groups`	signed in

push 4

Method	Path	Access
GET	`/api/push/key`	signed in
POST	`/api/push/subscribe`	signed in
POST	`/api/push/test`	signed in
POST	`/api/push/unsubscribe`	signed in

reports 5

Method	Path	Access
GET	`/api/reports/ar-aging`	signed in
GET	`/api/reports/profitability`	signed in
GET	`/api/reports/trust-balances`	signed in
GET	`/api/reports/utilization`	signed in
GET	`/api/reports/wip`	signed in

search 2

Method	Path	Access
GET	`/api/search`	signed in
GET	`/api/search/coverage`	signed in

sender-domains 1

Method	Path	Access
GET	`/api/sender-domains/:domain/dkim`	signed in

sender-emails 6

Method	Path	Access
POST	`/api/sender-emails`	signed in
DELETE	`/api/sender-emails/:id`	signed in
PUT	`/api/sender-emails/:id`	signed in
POST	`/api/sender-emails/:id/primary`	signed in
POST	`/api/sender-emails/:id/resend`	signed in
POST	`/api/sender-emails/:id/verify`	signed in

sender-options 1

Method	Path	Access
GET	`/api/sender-options`	signed in

sender-prefs 1

Method	Path	Access
GET	`/api/sender-prefs`	signed in

sso 2

Method	Path	Access
GET	`/api/sso`	signed in
POST	`/api/sso/accounts`	signed in

staff 1

Method	Path	Access
GET	`/api/staff`	signed in

tasks 1

Method	Path	Access
POST	`/api/tasks/:id/done`	signed in

tax-rates 1

Method	Path	Access
GET	`/api/tax-rates`	signed in

time 5

Method	Path	Access
GET	`/api/time`	signed in
POST	`/api/time`	signed in
DELETE	`/api/time/:id`	signed in
PUT	`/api/time/:id`	signed in
POST	`/api/time/:id/submit`	signed in

trust 4

Method	Path	Access
GET	`/api/trust`	signed in
POST	`/api/trust`	signed in
POST	`/api/trust/:id/txn`	signed in
GET	`/api/trust/:id/txns`	signed in

username 1

Method	Path	Access
POST	`/api/username/forgot`	public

users 3

Method	Path	Access
GET	`/api/users`	administrator
POST	`/api/users`	administrator
PUT	`/api/users/:id`	administrator