GovAtlas API

🔐 Authentication

• POST/api/auth/register- Register new user
• GETPOST/api/auth/[...nextauth]- NextAuth.js endpoints (signin, signout, session, etc.)

🌐 Public Endpoints (No Auth Required)

• POST/api/public/chat- Lyra AI chatbot for landing page
• POST/api/public/contact- Submit contact form
• POST/api/public/demo- Request product demo
• GET/api/public/faq- Get FAQ items
• POST/api/public/newsletter- Subscribe to newsletter

🤖 AI Services

• POST/api/ai/chat- Lyra AI assistant (streaming)
• POST/api/ai/explain- AI explanation for assessment questions
• GET/api/aila- Get AILA framework config (pillars, questions, maturity, validation, regional, context)

🏛️ Institutions

• GETPOST/api/institutions- List or create institutions
• GETPUTDELETE/api/institutions/:id- Get, update or delete institution

📋 Questionnaires

• GETPOST/api/questionnaires- List or create questionnaires
• GETPUTDELETE/api/questionnaires/:id- Get, update or delete questionnaire
• GETPOST/api/questionnaires/:id/questions- List or add questions to questionnaire
• PUTDELETE/api/questionnaires/:id/questions/:questionId- Update or delete question
• GETPOST/api/questionnaires/:id/responses- Get or submit questionnaire responses

📤 Submissions

• GETPOST/api/submissions- List or create assessment submissions
• GETPUTDELETE/api/submissions/:id- Get, update or delete submission
• POST/api/submissions/:id/actions- Execute actions (submit, approve, reject, etc.)

📊 Scores & Reports

• GETPOST/api/scores- Get or calculate assessment scores
• GET/api/scores/:id- Get specific score details
• GETPOST/api/reports- List or generate reports
• GETDELETE/api/reports/:id- Get or delete report
• GET/api/benchmarks- Get regional/international benchmarks
• GET/api/regional- Get regional comparison data
• GETPOST/api/export- Export data (CSV, JSON, PDF)

📝 Action Plans

• GETPOSTPUTDELETE/api/action-plans- Manage action plans from recommendations
• GETPOSTPUTDELETE/api/milestones- Manage action plan milestones

🛡️ RBAC (Role-Based Access Control)

• GETPOST/api/rbac/roles- List or create roles
• GETPUTDELETE/api/rbac/roles/:roleId- Manage specific role
• GET/api/rbac/permissions- List available permissions
• POST/api/rbac/check- Check if user has permission
• GETPOSTDELETE/api/rbac/users/:userId/roles- Manage user role assignments
• GET/api/rbac/audit-logs- Get RBAC audit logs
• POST/api/rbac/init- Initialize default RBAC structure

🎓 Academy (Learning Management)

• GETPOST/api/academy/courses- List or create courses
• GETPOST/api/academy/enrollments- Manage course enrollments
• GETPOST/api/academy/certifications- Manage certifications

⚙️ Platform Admin

• GETPOST/api/platform/tenants- List or create tenants
• GETPUTDELETE/api/platform/tenants/:id- Manage specific tenant
• GETPOST/api/platform/users- List or create platform users
• GETPUTDELETE/api/platform/users/:id- Manage specific user

📜 Policies & Templates

• GETPOSTPUTDELETE/api/policies- Manage governance policies
• GET/api/policies/templates- Get policy templates
• GETPOSTPUTDELETE/api/templates- Manage document templates

💬 Collaboration

• GETPOSTPUTDELETE/api/comments- Manage comments on assessments
• GETPOSTPUTDELETE/api/attachments- Manage file attachments
• GETPOST/api/invites- Manage user invitations
• GETPOSTPUTDELETE/api/tags- Manage tags/labels

🔔 Notifications & Activity

• GETPOSTPUT/api/notifications- Manage user notifications
• POST/api/notifications/process- Process notification queue
• GET/api/activity- Get activity feed

📈 Analytics & Audit

• GET/api/analytics- Get platform analytics
• GET/api/audit- Get audit trail

🔧 Settings & Configuration

• GETPUT/api/settings- Manage tenant settings
• GETPUT/api/users/preferences- Manage user preferences
• GETPOSTDELETE/api/api-keys- Manage API keys
• GETPUT/api/integrations- Manage integrations
• GET/api/permissions- Get user permissions
• GETPOST/api/widgets- Manage dashboard widgets

🔧 Utilities

• GET/api/health- Health check endpoint
• GET/api/search- Global search
• GETPOST/api/help- Help & support
• POST/api/feedback- Submit feedback
• POST/api/scheduled-tasks- Trigger scheduled tasks (cron)

HTTP Methods

Notes

• All endpoints require authentication except those under "Public Endpoints"
• Authentication is via NextAuth.js session cookies or Bearer token
• Tenant context is automatically derived from the authenticated user
• Rate limiting is applied to all endpoints