Your organization only
Each API client belongs to exactly one organization. It can never see another organization’s data.
Your organization only
Each API client belongs to exactly one organization. It can never see another organization’s data.
Read-only to start
Version 1 reads your organization’s name, type, institution type and country. Published lessons follow in v1.1. No personal data about pupils or staff.
Standard OAuth 2.0
Client credentials grant with HTTP Basic, opaque access tokens that last 15 minutes, and RFC 8414 metadata for your OAuth library.
Safe to try
A sandbox with synthetic data and its own credentials runs next to production.