gFinOS Public API

Verification, transparency, and webhook endpoints. All monetary amounts are in each user's local currency (USD/GBP/NGN/etc.).

Schema: /api/public/openapi.json

Curl examples

# Verify a statement token
curl -s "https://project--5d71d9ce-9982-40e9-98e6-17efab07f151.lovable.app/api/public/verify/statement-token?token=YOUR_TOKEN"

# Verify a proof of address / funds
curl -s "https://project--5d71d9ce-9982-40e9-98e6-17efab07f151.lovable.app/api/public/verify/proof?account=123456789012&kind=address"

# Public treasury stats (JSON)
curl -s "https://project--5d71d9ce-9982-40e9-98e6-17efab07f151.lovable.app/api/public/treasury/stats.json"

# OpenAPI 3.1 schema
curl -s "https://project--5d71d9ce-9982-40e9-98e6-17efab07f151.lovable.app/api/public/openapi.json"

Node.js example

import fetch from "node-fetch";
const base = "https://project--5d71d9ce-9982-40e9-98e6-17efab07f151.lovable.app";
const res = await fetch(`${base}/api/public/verify/statement-token?token=${token}`);
const body = await res.json();
if (!body.valid) throw new Error(body.reason);
console.log(body.holder_name, body.period_start, body.period_end);

Webhook schema versioning

Every outbound webhook includes an x-efinos-schema-version header. When the payload shape changes, we bump this and publish a migration guide at /webhooks/security.

Rate limits

Webhook replays: 5/hour per delivery, 20/minute per user. API keys: 60 req/minute per key by default; per-endpoint scopes and IP allowlists available.