System Endpoints - Complior

Status & Events

`GET /status`

Get engine status.

curl http://localhost:3578/status

Response:

{
  "status": "running",
  "version": "1.0.0",
  "mode": "daemon",
  "uptime": 3600,
  "last_scan": "2026-03-28T14:00:00Z",
  "agents_count": 3,
  "total_findings": 42,
  "compliance_score": 72
}

`GET /events`

Subscribe to Server-Sent Events stream.

curl -N http://localhost:3578/events

Event types: scan.complete, score.update, gate.pass, gate.fail, fix.applied, agent.created, evidence.appended.

Onboarding

`GET /onboarding/status`

Check if project has been onboarded.

`POST /onboarding/detect`

Auto-detect project information (frameworks, languages, AI systems).

`GET /onboarding/questions`

Get onboarding question blocks for interactive setup.

`POST /onboarding/complete`

Submit onboarding answers to generate profile.

`POST /onboarding/guided/start`

Start guided onboarding wizard (8 steps).

`GET /onboarding/guided/status`

Get current guided onboarding progress.

`POST /onboarding/guided/step/:n`

Execute step N of guided onboarding.

Badges & Reports

`GET /badge`

Get compliance badge as SVG image.

curl http://localhost:3578/badge > badge.svg

`POST /badge/generate`

Generate badge SVG + COMPLIANCE.md file.

`POST /report/pdf`

Generate PDF compliance report.

{ "organization": "Acme Corp", "jurisdiction": "DE", "isFree": true }

`POST /report/markdown`

Generate markdown compliance report.

Create a shareable compliance result.

{
  "jurisdiction": "DE",
  "scanType": "standard",
  "expirationDays": 30
}

Response:

{
  "id": "abc123",
  "url": "https://app.complior.ai/share/abc123",
  "expiresAt": "2026-04-28T00:00:00Z",
  "score": 72,
  "findingsCount": 42
}

Get a shared result by ID.

`GET /shares`

List all shared results.

SaaS Sync

`POST /sync/passport`

Push all passports to SaaS dashboard.

`POST /sync/scan`

Push scan results to SaaS.

`POST /sync/documents`

Push compliance documents to SaaS.

`POST /sync/evidence`

Push evidence chain to SaaS.

`GET /sync/status`

Check SaaS sync status and authentication. All sync endpoints require token and saasUrl in the request body.

Frameworks & Scoring

`GET /frameworks`

List available compliance frameworks.

`GET /frameworks/scores`

Get scores for all selected frameworks (EU AI Act, AIUC-1, ISO 42001, etc.).

`GET /debt`

Get compliance debt score with optional trend data.

`GET /cost-estimate`

Estimate remediation cost in hours and euros.

Jurisdictions

`GET /jurisdictions`

List 30 EU/EEA jurisdictions with local authorities.

`GET /jurisdictions/:code`

Get jurisdiction details (authority name, contact, language).

Tools

`GET /tools/status`

Check status of external tools (uv, Semgrep, Bandit, detect-secrets).

`POST /tools/update`

Install or update external analysis tools.

What-If & Simulation

`POST /whatif`

Analyze hypothetical scenario.

{
  "type": "jurisdiction",
  "params": { "from": "DE", "to": "FR" }
}

Types: jurisdiction, tool, risk_level.

`POST /simulate`

Batch compliance simulation — predict score impact of multiple actions.

{
  "actions": ["fix:no-disclosure", "fix:missing-fria", "doc:ai-policy"],
  "passportCompleteness": 85
}

​Status & Events

​GET /status

​GET /events

​Onboarding

​GET /onboarding/status

​POST /onboarding/detect

​GET /onboarding/questions

​POST /onboarding/complete

​POST /onboarding/guided/start

​GET /onboarding/guided/status

​POST /onboarding/guided/step/:n

​Badges & Reports

​GET /badge

​POST /badge/generate

​POST /report/pdf

​POST /report/markdown

​Sharing

​POST /share

​GET /share/:id

​GET /shares

​SaaS Sync

​POST /sync/passport

​POST /sync/scan

​POST /sync/documents

​POST /sync/evidence

​GET /sync/status

​Frameworks & Scoring

​GET /frameworks

​GET /frameworks/scores

​GET /debt

​GET /cost-estimate

​Jurisdictions

​GET /jurisdictions

​GET /jurisdictions/:code

​Tools

​GET /tools/status

​POST /tools/update

​What-If & Simulation

​POST /whatif

​POST /simulate