Public REST API

Bring incidents in from the rest of your stack. The REST API at /api/v1 covers:

• Creating and updating incidents, with a source so you know where each one came from
• Reading severities, statuses and incident types
• Reading and writing the catalogue

Authentication is Bearer-token via API keys with per-resource permissions, and incident creation is idempotent, so retries never create duplicates.