Developers
Everything on Codal is reachable over a documented REST API — the same one this site runs on.
API schema
The full REST surface as an OpenAPI 3 document. Every public and authenticated route, request and response shape.
Webhooks
Subscribe a URL to project events: release.created, change.applied, issue.opened, opid.withdrawn, opid.superseded. Deliveries are HMAC-SHA256 signed (X-Codal-Signature) and retried with backoff; every attempt is logged.
Trust endpoints
Verify anything we publish without an account: the transparency log with Merkle inclusion and consistency proofs, signed registry snapshots, release verification, and deterministic book.codal packages.