Skip to main content

​
About the API

VISO TRUST exposes a public REST API under /api/v1/* for custom integrations and automated workflows. Every endpoint in the sidebar is generated from the platform’s OpenAPI (Swagger) specification, served at https://app.visotrust.com/v1/api-docs — you can import that URL into Postman, Insomnia, or any OpenAPI-compatible client. The same bearer token also authenticates the MCP server at https://mcp.visotrust.com/sse for AI tool integrations. See Available integrations for a broader list of ways to connect VISO TRUST to other systems.

​
Authentication overview

The VISO TRUST API uses bearer token authentication. Every request must include an API token in the Authorization header. Requests without a valid token are rejected.

​
Base URL

All endpoints are served from:
Each path in this reference is appended to that base URL — for example, GET /api/v1/relationships resolves to https://app.visotrust.com/api/v1/relationships.

​
Generate an API token

API tokens are tied to a user account. The public API requires program-level access, so generate the token from an Admin or Program Manager account.
1

Open your user profile

Log in to the Dashboard as the user the token should act as, then open your user profile.
2

Generate the token

Generate an API token from the profile. The token is shown only once at generation.
3

Store it securely

Copy the token and store it in a secrets manager or equivalent. You cannot retrieve it again later — if it is lost, generate a new one.
For automation and integrations, generate the token from a dedicated service account rather than a personal account. This keeps API access from being tied to an individual’s employment status and makes token lifecycle easier to manage.

​
Authenticate a request

Send the token as a bearer token in the Authorization header:
The same token authenticates the MCP server for AI tool integrations — pass it as a bearer token there as well.
The interactive playground on each endpoint page sends real requests to https://app.visotrust.com using the token you enter. Use a token scoped to an account with the access you intend to exercise.

​
Permissions

The public API requires program-level access. Tokens generated from an Admin or Program Manager account can call the /api/v1/* endpoints; tokens from Contributor or Viewer accounts cannot. If a request returns a permission error, confirm the token’s account has Admin or Program Manager access. See Roles and permissions for details.