AIPROCUREMENT.CLUB Procurement API

Authentication

Every request includes a Authorization: Bearer <jwt> header. Tokens are signed with RS256 and rotated daily; clock skew tolerance is ±60s.

curl https://api.aiprocurement.club/v1/requisitions \
  -H "Authorization: Bearer $JWT" \
  -H "Content-Type: application/json"

Requisitions2 endpoints

Purchase Orders2 endpoints

Invoices3 endpoints

Suppliers4 endpoints

Catalog6 endpoints

Inventory2 endpoints

RFQs6 endpoints

Agents4 endpoints

Audit3 endpoints

Enterprise7 endpoints

Errors

RFC 9457 Problem Details. Every error is hash-chained into the audit log.

{
  "type": "https://aiprocurement.club/errors/state-conflict",
  "title": "State conflict",
  "status": 409,
  "detail": "PO-2026-09123 is in state 'closed'; cannot be cancelled.",
  "trace_id": "8f3a2d…",
  "audit_event": "AUD-77231"
}

Evidence API PUBLIC

No auth required. 10 req/min rate limit. Returns machine-readable evidence records for SOC 2, ISO 27001, GDPR Art. 30, and the SHA-256 audit chain head.

GET /v1/audit/verify

{
  "head_hash": "sha256:c8f...",
  "events": 142310,
  "verified_at": "2026-05-02T11:00:00Z",
  "frameworks": ["soc2","iso27001","gdpr-art30","stride"]
}