Does Maditon have an API?
Yes. Maditon's backend is a REST API with an auto-generated OpenAPI specification at https://api.maditon.app/openapi.json, browsable at https://api.maditon.app/docs. It publishes 86 product endpoints covering AI systems, risk classification, compliance checklists, evidence, dossiers, billing and data export. Operator-only endpoints are deliberately excluded from the specification.
The API is the product. The web app is one client of it, and the OpenAPI document is published so that other clients — including AI agents — can be another.
- Specification:
https://api.maditon.app/openapi.json - Browsable docs:
https://api.maditon.app/docs - Health:
https://api.maditon.app/health
Every endpoint carries a summary and typed request and response schemas, which is what makes the specification usable as a tool definition rather than only as human documentation. Responses are JSON with consistent shapes; errors are machine-readable.
Publishing the product API is a deliberate design decision. Publishing the operator surface was not, so the admin endpoints are excluded from the schema — they were always authenticated and admin-gated, but a public map of them served no one but a scanner.
The specification is generated from the code, so it cannot drift from the implementation the way hand-written API documentation does.
Related API endpoints
/health no auth Healthcheck
Base URL https://api.maditon.app ·
full specification at openapi.json
Read next
A free Solo account runs a real classification on one of your own systems — no card, no sales call.
Run a free classification