Pillar 5
Integration-Ready
API-first DRM workflows. Scoped API keys, HMAC-signed webhooks, and a structured event catalog — designed for embedding content governance into existing systems.
What you get
- 7 scoped API key permissions (content, shares, audit, admin)
- HMAC-SHA256 signed webhooks with encrypted secrets at rest
- 6 webhook event types covering content, share, and access lifecycle
- Every workflow available via API — the portal is a consumer of the same surface
- Rate limiting and no-store responses on all API endpoints
How it works
- 1Create scoped API key
Tenant admins create API keys via the portal with specific scopes. Keys are stored as prefix + SHA-256 hash — full key is returned exactly once.
- 2Integrate via REST
Content creation, version upload, share management, revocation, and audit export are all available as versioned API operations.
- 3React to events
Register HTTPS webhook endpoints to receive HMAC-signed event payloads for content, share, and access lifecycle events.