Public API Reference

The public API provides programmatic access to Tendrex for external integrations, reporting tools, and automation. It is separate from the internal session-based API used by the Tendrex web app.

Base URL

https://app.tendrex.co.uk/api/v1

Authentication

All requests must include an API key in the Authorization header as a Bearer token. API keys are prefixed with tx_ and created from the Developer tab in the Tendrex app.

curl -H "Authorization: Bearer tx_your-api-key" \
  https://app.tendrex.co.uk/api/v1/tenders

Scopes

Each API key has one of three scope levels. Higher scopes include all lower scope permissions.

Scope	Access
Read	List and retrieve resources
Write	Create, update, and delete resources (includes read)
Admin	Full access including user invitations and API key management (includes write)

Requests that exceed the key’s scope return 403 Forbidden.

Rate limiting

The API is rate limited to 100 requests per minute per key.

Endpoints

Tenders

Method	Endpoint	Scope	Description
GET	/tenders	Read	List all tenders
GET	/tenders/:id	Read	Get tender details
POST	/tenders	Write	Create a new tender
PUT	/tenders/:id	Write	Update tender metadata
DELETE	/tenders/:id	Write	Delete a tender

Answers

Method	Endpoint	Scope	Description
GET	/tenders/:id/answers	Read	List answers for a tender
GET	/answers/:id	Read	Get a specific answer
PUT	/answers/:id	Write	Update an answer
POST	/answers/:id/approve	Write	Approve an answer
POST	/answers/:id/reject	Write	Reject an answer
POST	/answers/:id/assign	Write	Assign an answer to a user or team

Documents

Method	Endpoint	Scope	Description
GET	/documents	Read	List all documents
POST	/documents	Write	Upload a new document
GET	/documents/:id/chunks	Read	Get document chunks
DELETE	/documents/:id	Write	Delete a document

RAG Query

Method	Endpoint	Scope	Description
POST	/rag/query	Read	Query the knowledge base and receive an AI-generated answer with sources

Tip

The RAG query endpoint is useful for integrating Tendrex’s answer generation into external workflows — for example, pulling draft answers into a CRM or proposal tool.

Knowledge Library

Method	Endpoint	Scope	Description
GET	/library	Read	List approved canonical answers
GET	/library/search	Read	Semantic search across the library

Users

Method	Endpoint	Scope	Description
GET	/users	Read	List users in your organisation
POST	/users/invite	Admin	Invite a user by email

Teams

Method	Endpoint	Scope	Description
GET	/teams	Read	List all teams

API Keys

Method	Endpoint	Scope	Description
GET	/keys	Admin	List API keys
POST	/keys	Admin	Create a new API key
DELETE	/keys/:id	Admin	Delete an API key

OpenAPI Specification

Method	Endpoint	Scope	Description
GET	/openapi.json	None	OpenAPI 3.0 specification for the public API

Errors

All errors return a JSON body:

{
  "error": "forbidden",
  "message": "Insufficient scope for this operation"
}

Status	Meaning
400	Bad request — invalid parameters
401	Unauthorised — missing or invalid API key
403	Forbidden — key does not have the required scope
404	Not found — resource does not exist
429	Rate limited — too many requests (100/min per key)
500	Internal server error