JSON API & Authentication
- The public JSON API (
/api/:lang/:slug) is intentionally unauthenticated and read-only — legal texts should be retrievable from any connected website without credentials. There is no way to write or change content through this API. - Editing legal texts is only possible via the logged-in
/adminsession (password or multi-user login) — there is no separate API with bearer tokens or API keys for write access. - Cron endpoints (
/api/cron/...) require the?secret=query parameter (or an active admin session) and trigger server actions (backup, webhook delivery, go-live, audit email) — but they never expose content or credentials. See Cron Jobs.
Example
Section titled “Example”GET https://legal.yourdomain.com/api/en/privacy-policyGET https://legal.yourdomain.com/api/terms-b2cFor automated change notifications, see Webhooks.