Developer Platform

Build securely on top of OsTaaS

Use the OsTaaS API to automate projects, test runs, environment requests, evidence retrieval, support workflows and approved workspace operations. Every request is authenticated, scoped, permission-checked, entitlement-gated, rate-limited and audited.

Opening the portal requires an account — you'll be prompted to register, then returned here.

API applications

Register server-to-server applications and manage credentials.

API keys

Create scoped credentials for automation and scripts.

Webhooks

Receive signed event notifications from OsTaaS.

API logs

Review recent API activity, failures and rate-limit events.

Documentation

Browse endpoints, schemas, scopes and examples.

The authorization model

Possessing an API scope never bypasses workspace authorization. Every API call resolves through the full chain before it touches data:

API credential → workspace → scope → membership / service principal → role → permission → subscription entitlement → resource tenant check → execute → audit

Documentation is public and does not require an account. To register applications, issue credentials or configure webhooks, open the Developer Portal — you'll be prompted to create a workspace first, then landed straight in the portal.