Skip to main content
The VISO TRUST API uses bearer token authentication. Every request must include an API token in the Authorization header. Requests without a valid token are rejected.

​
Base URL

All endpoints are served from:
Each path in this reference is appended to that base URL — for example, GET /api/v1/relationships resolves to https://app.visotrust.com/api/v1/relationships.

​
Generate an API Token

API tokens are tied to a user account. The public API requires program-level access, so generate the token from an Admin or Program Manager account.
1

Open your user profile

Log in to the Dashboard as the user the token should act as, then open your user profile.
2

Generate the token

Generate an API token from the profile. The token is shown only once at generation.
3

Store it securely

Copy the token and store it in a secrets manager or equivalent. You cannot retrieve it again later — if it is lost, generate a new one.
For automation and integrations, generate the token from a dedicated service account rather than a personal account. This keeps API access from being tied to an individual’s employment status and makes token lifecycle easier to manage.

​
Authenticate a Request

Send the token as a bearer token in the Authorization header:
The same token authenticates the MCP server for AI tool integrations — pass it as a bearer token there as well.
The interactive playground on each endpoint page sends real requests to https://app.visotrust.com using the token you enter. Use a token scoped to an account with the access you intend to exercise.

​
Permissions

The public API requires program-level access. Tokens generated from an Admin or Program Manager account can call the /api/v1/* endpoints; tokens from Contributor or Viewer accounts cannot. If a request returns a permission error, confirm the token’s account has Admin or Program Manager access. See Roles and permissions for details.