Kenesto API

The Kenesto API allows external applications to interact with
documents, projects, workflows and dependencies.

• • • • Kenesto API requests use HTTPS with TLS encryption for all authentication traffic. POST requests using this methodology, ensures that usernames, passwords, tokens, headers, and request content are protected from network interception.
      • All API communication must occur over HTTPS/TLS. Non-encrypted HTTP connections are not supported.
        • HTTPS/TLS required
        • POST-based authentication
        • credentials encrypted in transit
        • tokens should be securely stored
        • tokens expire/revoke
        • avoid logging credentials/tokens
      • All API operations enforce server-side permission and access validation based on the authenticated administrator level user status.