Introduction
The public AS2Expert API exposes query and automation operations for stations, partners, certificates, messages, webhooks, and operational metrics.
In the current version all documented endpoints are consumed via HTTP POST and require a Bearer token in the Authorization header.
General conventions
| Topic | Detail |
|---|---|
| Base URL | https://free.as2expert.com/api/v1 |
| Method | POST for both read and write operations in this version |
| Authentication | Authorization: Bearer <token> |
| Content-Type | application/json |
| Success response | {"status":"success","data":...} or {"status":"success","total":n,"data":[...]} |
| Error response | {"status":"error","msg":"..."} |
| Route | Scopes | Description |
|---|---|---|
| /stations | read | List stations visible in the current domain |
| /stations/detail | read | Return extended station details |
| /stations/stats | read | Operational totals and success rate for a station or folder context |
| /stations/create | write / admin | Create a station using internal KMR logic |
| /partners | read | List partners, optionally filtered by station |
| /partners/detail | read | Return extended partner details |
| /partners/create | write / admin | Create a trading partner |
| /certificates | read | List certificates available in the current environment |
| /certificates/detail | read | Return full certificate metadata |
| /certificates/create | write / admin | Generate self-signed certificates |
| /messages | read | List recent messages |
| /messages/detail | read | Return basic message details |
| /messages/download | read | Return the binary message content in base64 |
| /messages/send | write / admin | Send one or more AS2 documents |
| /webhooks/configure | write | Configure webhooks per partner |
| /webhooks/get | read | Get a partner webhook configuration |
| /webhooks/test | write | Trigger a test webhook |
| /webhooks/logs | read | List webhook delivery logs |
| /dashboard/kpis | read | Quick summary of activity and success rate for the last 30 days |
The examples below use the public Free environment that is currently published and validated: https://free.as2expert.com/api/v1.
curl
curl -X POST "https://free.as2expert.com/api/v1/stations" -H "Authorization: Bearer $API_TOKEN" -H "Content-Type: application/json" -d '{}'Python
import requests
BASE_URL = "https://free.as2expert.com/api/v1"
headers = {
"Authorization": "Bearer TU_TOKEN",
"Content-Type": "application/json",
}
response = requests.post(
f"{BASE_URL}/dashboard/kpis",
headers=headers,
json={}
)
print(response.json())JavaScript
const response = await fetch("https://free.as2expert.com/api/v1/messages", {
method: "POST",
headers: {
"Authorization": "Bearer YOUR_TOKEN",
"Content-Type": "application/json"
},
body: JSON.stringify({ limit: 10 })
});
const data = await response.json();
console.log(data);The main documentation uses canonical English routes and payload keys. Legacy Spanish aliases remain accepted for compatibility, but they are intentionally kept secondary to avoid polluting the primary reading flow.
| Canonical | Legacy alias | Notes |
|---|---|---|
/stations | /estaciones | Both published in Free |
/messages/detail | /mensajes/detalle | Both require numeric id |
/webhooks/get | /webhooks/obtener | Both published in Free |
| Scope | Usage |
|---|---|
| read | Queries, lists, detail views, metrics, and log reading |
| write | Entity creation, message sending, and webhook configuration |
| admin | Allows write operations on endpoints that accept write/admin |
The public API focuses on business integrations. Trust lifecycle, TSA verification, and compliance gates are governed by the product UI plus internal backend objects.
| Surface | Purpose |
|---|---|
Socios / Trust Lifecycle | Prepare next certificates, schedule rollover, activate it, retire it, and read the event timeline. |
Certificados / Usage / Lifecycle | See where a certificate is current, where it is next, and which partners are affected. |
TsaProfiles | Configure TSA endpoints, trust material, and run real RFC3161 validation. |
ComplianceRunStart | Execute release canaries and persist pass/warn/fail evidence for the chosen release tag. |
ComplianceReleaseExport | Aggregate a release tag into a single gate verdict and export a readable markdown summary. |
This layer is intentionally kept outside the public Free API because it is an operator governance surface, not a generic third-party integration contract.