Skip to content
Back to Documentation

API Reference

Reference map for currently available `v1` endpoints and shared response contracts.

Base URL

https://www.securepointusa.com/api/v1

External API calls use an active `spusa_` API key with the required scope. Browser/admin calls use an authenticated user session with a valid organization scope.

Endpoint Map

MethodPathPurpose
POST/api/v1/checkinSubmit a v1 check-in request.
POST/api/v1/prescreenRun a prescreen decision workflow.
POST/api/v1/ownership/checkRun an ownership-aware screening check where enabled.
POST/api/v1/vendors/screenScreen vendor entities against sanctions sources.
GET/api/v1/screenings/{id}Fetch one screening record by id.
GET/api/v1/screenings/{id}/evidenceFetch evidence metadata for a screening record.
GET/api/v1/adjudication/queueFetch adjudication cases available to the caller.
GET/api/v1/adjudication/{id}Fetch one adjudication case.
POST/api/v1/adjudication/{id}/dispositionRecord an adjudication disposition.
POST/api/v1/sessions/{id}/updateUpdate a session state or metadata.
GET/api/v1/audit/exportExport audit records for authorized users.
GET/api/v1/audit/integrityCheck audit-log integrity status for authorized users.
PUT/api/v1/adjudication/rulesUpdate adjudication rules configuration.
PUT/api/v1/workforce/syncSync workforce identity records.
GET/api/v1/compliance/reportsRetrieve compliance report summaries.
GET/api/v1/compliance/sales-matrixRetrieve compliance capability matrix data.

Success Response Shape

{
  "success": true,
  "data": {
    "...": "resource payload"
  },
  "meta": {
    "requestId": "uuid",
    "timestamp": "2026-02-24T00:00:00.000Z"
  }
}

Error Response Shape

{
  "success": false,
  "error": {
    "code": "FORBIDDEN",
    "message": "Insufficient permissions",
    "details": {
      "...": "optional diagnostic data"
    }
  },
  "meta": {
    "requestId": "uuid",
    "timestamp": "2026-02-24T00:00:00.000Z"
  }
}

Example Request

curl -X POST "https://www.securepointusa.com/api/v1/checkin" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <spusa_api_key_or_user_session>" \
  -d '{
    "visitor": {
      "first_name": "Alex",
      "last_name": "Morgan"
    }
  }'

How to screen a name with the Screening API

A short walkthrough of /api/v1/prescreen and /api/v1/screenings/{id}, once SecurePoint has turned on the Screening API for your organization and issued your API key.

Read the transcript

Step 1. SecurePoint turns on the Screening API for your organization and issues your API key.

Step 2. POST the name to prescreen as the subject, with your key in the Authorization header. The key identifies your organization, so you don't send one.

Step 3. Read the result: a screening ID, a risk level and score, the number of possible matches, and whether review is required.

When review is required, the name goes to your compliance team's review queue, and the status reads pending.

Step 4. Keep the screening ID. Later, GET the screening by that ID to read the stored result.

Screen visitors at check-in. Keep the decisions on record.

Handle Errors and Retries Next

Review rate-limit and error-handling guidance before integrating production traffic.

Open Error Handling Guide
API Reference - SecurePoint USA Documentation