API Documentation

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/organizations" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Stonebridge Health — East",
  "parent_id": "org_root",
  "external_id": "CUST-4021",
  "plan": "enterprise",
  "data_region": "us"
}'

{
  "org_id": "org_7f31aa",
  "name": "Stonebridge Health — East",
  "parent_id": "org_root",
  "path": "org_root/org_7f31aa",
  "status": "active",
  "created_at": "2026-07-02T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/organizations?parent_id=<parent_id>&limit=<limit>&cursor=<cursor>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "organizations": [
    {
      "org_id": "org_7f31aa",
      "name": "Stonebridge Health — East",
      "parent_id": "org_root",
      "path": "org_root/org_7f31aa",
      "status": "active",
      "mailbox_count": 42
    }
  ],
  "next_cursor": null
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/organizations/{org_id}" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "org_id": "org_7f31aa",
  "name": "Stonebridge Health — East",
  "parent_id": "org_root",
  "path": "org_root/org_7f31aa",
  "status": "active",
  "settings": {
    "enforce_mfa": true,
    "default_dlp_policy": "pol_hipaa_default"
  },
  "usage": {
    "mailboxes": 42,
    "seats": 60
  }
}

# BASE_URL is tenant-specific — request yours from support.
curl -X PATCH "$BASE_URL/v3/organizations/{org_id}" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "status": "active",
  "settings": {
    "enforce_mfa": true
  }
}'

{
  "org_id": "org_7f31aa",
  "status": "active",
  "settings": {
    "enforce_mfa": true
  }
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/organizations/{org_id}/org-units" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Clinical",
  "parent_ou_id": null
}'

{
  "ou_id": "ou_31b2",
  "name": "Clinical",
  "path": "/Clinical"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/organizations/{org_id}/domains" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "domain": "stonebridge.health"
}'

{
  "domain_id": "dom_88fa",
  "domain": "stonebridge.health",
  "status": "pending",
  "dns_records": [
    {
      "type": "TXT",
      "host": "@",
      "value": "bastion-verify=8f2c1a9e"
    },
    {
      "type": "MX",
      "host": "@",
      "value": "mx.tenant.mail",
      "priority": 10
    },
    {
      "type": "TXT",
      "host": "bastion._domainkey",
      "value": "v=DKIM1; k=rsa; p=MIGf…"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/organizations/{org_id}/members" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "admin@stonebridge.health",
  "role": "admin",
  "ou_id": "ou_31b2"
}'

{
  "member_id": "mem_5a12",
  "email": "admin@stonebridge.health",
  "role": "admin",
  "status": "invited"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/organizations/{org_id}/roles" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Billing clerk",
  "scopes": [
    "secure_email:read",
    "messages:read"
  ]
}'

{
  "role_id": "role_2c9d",
  "name": "Billing clerk",
  "scopes": [
    "secure_email:read",
    "messages:read"
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/organizations/{org_id}/api-keys" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "East region server",
  "scopes": [
    "identity:read",
    "secure_email:write"
  ]
}'

{
  "key_id": "key_9f0a",
  "org_id": "org_7f31aa",
  "scopes": [
    "identity:read",
    "secure_email:write"
  ],
  "secret": "sk_live_… (shown once)",
  "created_at": "2026-07-02T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/api-keys" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Verification service (read-only)",
  "scopes": [
    "verify:read",
    "compliance:read"
  ],
  "org_id": "org_7f31aa",
  "ip_allowlist": [
    "203.0.113.24/32"
  ],
  "expires_at": "2027-07-02T00:00:00Z"
}'

{
  "key_id": "key_9f0a",
  "name": "Verification service (read-only)",
  "scopes": [
    "verify:read",
    "compliance:read"
  ],
  "org_id": "org_7f31aa",
  "secret": "sk_live_… (shown once)",
  "created_at": "2026-07-02T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/api-keys" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "keys": [
    {
      "key_id": "key_9f0a",
      "name": "Verification service (read-only)",
      "scopes": [
        "verify:read",
        "compliance:read"
      ],
      "last_used_at": "2026-07-02T13:59:00Z"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/api-keys/{key_id}/rotate" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "key_id": "key_9f0a",
  "secret": "sk_live_new… (shown once)",
  "previous_valid_until": "2026-07-03T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X DELETE "$BASE_URL/v3/api-keys/{key_id}" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "key_id": "key_9f0a",
  "status": "revoked"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/scopes" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "scopes": [
    {
      "scope": "verify:read",
      "product": "Contact Verification",
      "grants": "Run verification and compliance screens."
    },
    {
      "scope": "secure_email:read",
      "product": "Email Encryption",
      "grants": "Read message status and audit events."
    },
    {
      "scope": "secure_email:write",
      "product": "Email Encryption",
      "grants": "Send and recall encrypted mail."
    },
    {
      "scope": "dlp:read",
      "product": "Sensitive Data Protection",
      "grants": "Scan content and read findings."
    },
    {
      "scope": "dlp:write",
      "product": "Sensitive Data Protection",
      "grants": "Transform, redact, and manage detectors/profiles."
    },
    {
      "scope": "dlp:restore",
      "product": "Sensitive Data Protection",
      "grants": "Re-identify tokenized content (high-privilege)."
    },
    {
      "scope": "mailboxes:write",
      "product": "Mailbox Management",
      "grants": "Provision and manage mailboxes."
    },
    {
      "scope": "messages:write",
      "product": "Mailbox Management",
      "grants": "Send mail from a mailbox."
    },
    {
      "scope": "directory:write",
      "product": "Mailbox Management",
      "grants": "Manage contacts, lists, and distribution lists."
    },
    {
      "scope": "chat:read",
      "product": "Chat Integration",
      "grants": "Read bridged spaces, messages, and attachments."
    },
    {
      "scope": "chat:write",
      "product": "Chat Integration",
      "grants": "Create spaces, post attributed messages, and react."
    },
    {
      "scope": "chat:admin",
      "product": "Chat Integration",
      "grants": "Manage members, access maps, commands, and delegated grants."
    },
    {
      "scope": "marketing:write",
      "product": "Marketing & Campaigns",
      "grants": "Create and send campaigns."
    },
    {
      "scope": "leads:write",
      "product": "Leads Marketplace",
      "grants": "Purchase and post leads."
    },
    {
      "scope": "webhooks:write",
      "product": "Webhooks",
      "grants": "Manage webhook subscriptions."
    },
    {
      "scope": "org:write",
      "product": "Organizations",
      "grants": "Manage sub-organizations, members, and roles."
    },
    {
      "scope": "keys:write",
      "product": "API Keys & Access",
      "grants": "Create, rotate, and revoke API keys."
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/verify/contact" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "phone": "+12065550142",
  "email": "dana@stonebridge.health",
  "name": "Dana Okafor",
  "address": {
    "line1": "500 Market St",
    "city": "Seattle",
    "state": "WA",
    "postal_code": "98104"
  }
}'

{
  "request_id": "req_8f2c1a9e",
  "confidence": 96,
  "phone": {
    "status": "verified",
    "type": "mobile",
    "carrier": "Example Wireless",
    "prepaid": false,
    "reachable": true
  },
  "email": {
    "status": "verified",
    "deliverable": true,
    "disposable": false
  },
  "address": {
    "status": "partial",
    "match": "street"
  },
  "name": {
    "status": "verified",
    "match": "exact"
  }
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/verify/phone" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "phone": "+12065550142"
}'

{
  "request_id": "req_1b7d33af",
  "valid": true,
  "type": "mobile",
  "carrier": "Example Wireless",
  "prepaid": false,
  "reachable": true,
  "confidence": 91,
  "country_code": "US"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v2/verify/phone-owner?phone=+12065550142" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "request_id": "req_44aa10c2",
  "name": "Dana Okafor",
  "region": {
    "city": "Seattle",
    "state": "WA"
  },
  "type": "mobile",
  "carrier": "Example Wireless"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/verify/email" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "dana@stonebridge.health"
}'

{
  "request_id": "req_9c0e77b1",
  "deliverable": true,
  "mx_found": true,
  "disposable": false,
  "role_account": false,
  "risk": "low"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/compliance/screen" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "phone": "+12065550142"
}'

{
  "request_id": "req_2f56ab90",
  "dnc_national": false,
  "dnc_state": false,
  "litigation_risk": "low",
  "recommendation": "allow"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/secure-email/send" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "from": "billing@stonebridge.health",
  "to": [
    "patient@example.com"
  ],
  "subject": "Your statement",
  "body_html": "<p>Your latest statement is attached.</p>",
  "policy": "pol_hipaa_default",
  "expires_in": 604800,
  "allow_recall": true
}'

{
  "message_id": "msg_7d21e0a4",
  "status": "sent",
  "delivery_method": "tls",
  "dlp_action": "encrypt",
  "expires_at": "2026-07-09T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/secure-email/{message_id}/recall" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "reason": "Sent to wrong recipient"
}'

{
  "message_id": "msg_7d21e0a4",
  "status": "recalled",
  "recalled_at": "2026-07-02T15:10:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/secure-email/{message_id}/events" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "message_id": "msg_7d21e0a4",
  "events": [
    {
      "type": "delivered",
      "recipient": "patient@example.com",
      "at": "2026-07-02T14:03:05Z"
    },
    {
      "type": "opened",
      "recipient": "patient@example.com",
      "at": "2026-07-02T14:20:41Z"
    },
    {
      "type": "decrypted",
      "recipient": "patient@example.com",
      "at": "2026-07-02T14:20:44Z"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/dlp/detectors?category=<category>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "detectors": [
    {
      "id": "us_ssn",
      "name": "US Social Security Number",
      "category": "identity",
      "model": "pattern+context"
    },
    {
      "id": "mrn",
      "name": "Medical Record Number",
      "category": "health",
      "model": "ml"
    },
    {
      "id": "pan",
      "name": "Payment Card Number",
      "category": "financial",
      "model": "pattern+checksum"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/scan" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "content": "Member SSN 123-45-6789, DOB 1984-02-11.",
  "detectors": [
    "us_ssn",
    "date_of_birth"
  ],
  "min_confidence": "low"
}'

{
  "request_id": "req_5aa3ed10",
  "findings": [
    {
      "detector": "us_ssn",
      "quote_hash": "sha256:1a…",
      "offset": 11,
      "length": 11,
      "confidence": "high",
      "severity": "high"
    },
    {
      "detector": "date_of_birth",
      "offset": 27,
      "length": 10,
      "confidence": "medium",
      "severity": "medium"
    }
  ],
  "summary": {
    "total": 2,
    "max_severity": "high"
  },
  "recommended_action": "encrypt"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/transform" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "content": "SSN 123-45-6789, card 4111 1111 1111 1111.",
  "transformations": [
    {
      "detector": "us_ssn",
      "method": "mask",
      "options": {
        "keep_last": 4
      }
    },
    {
      "detector": "pan",
      "method": "tokenize",
      "options": {
        "reversible": true,
        "format_preserving": true
      }
    }
  ]
}'

{
  "request_id": "req_6bc1f0",
  "content": "SSN ***-**-6789, card tok_4f21_8830_2201_9c40.",
  "token_map_id": "tmap_90a1",
  "transformations_applied": 2
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/restore" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "content": "card tok_4f21_8830_2201_9c40.",
  "token_map_id": "tmap_90a1"
}'

{
  "request_id": "req_7cd2a1",
  "content": "card 4111 1111 1111 1111."
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/redact-image" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "image_base64": "<base64>",
  "detectors": [
    "us_ssn",
    "pan"
  ]
}'

{
  "request_id": "req_88ea10",
  "redacted_image_base64": "<base64>",
  "regions_redacted": 2
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/detectors" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Patient ID",
  "type": "regex",
  "pattern": "PT-\\d{8}"
}'

{
  "detector_id": "det_11c9",
  "name": "Patient ID",
  "type": "regex",
  "status": "active"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/scan-profiles" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "PHI outbound",
  "detectors": [
    "us_ssn",
    "mrn",
    "date_of_birth"
  ],
  "min_confidence": "medium",
  "on_match": "encrypt"
}'

{
  "profile_id": "prof_hipaa",
  "name": "PHI outbound",
  "detector_count": 3
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/transform-profiles" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Mask PHI",
  "transformations": [
    {
      "detector": "us_ssn",
      "method": "mask",
      "options": {
        "keep_last": 4
      }
    }
  ]
}'

{
  "profile_id": "tprof_22a0",
  "name": "Mask PHI"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/monitors" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Watch Clinical OU",
  "target": {
    "type": "ou",
    "id": "ou_31b2"
  },
  "profile_id": "prof_hipaa",
  "schedule": "continuous",
  "action": "quarantine"
}'

{
  "monitor_id": "mon_5a7c",
  "status": "active",
  "schedule": "continuous"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/jobs" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "target": {
    "type": "mailbox",
    "id": "mbx_3aa91b7c"
  },
  "profile_id": "prof_hipaa"
}'

{
  "job_id": "job_7f0c",
  "status": "running",
  "created_at": "2026-07-02T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/dlp/jobs/{job_id}" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "job_id": "job_7f0c",
  "status": "done",
  "items_scanned": 4210,
  "findings_summary": [
    {
      "detector": "us_ssn",
      "count": 34,
      "max_severity": "high"
    },
    {
      "detector": "pan",
      "count": 8,
      "max_severity": "high"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/discovery" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "scope": {
    "type": "org",
    "id": "org_7f31aa"
  }
}'

{
  "discovery_id": "disc_31aa",
  "status": "running",
  "preview": [
    {
      "mailbox_id": "mbx_3aa91b7c",
      "categories": [
        "health",
        "identity"
      ],
      "risk": "high"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/dlp/risk" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "dataset_id": "ds_44b0",
  "quasi_identifiers": [
    "zip",
    "birth_year",
    "gender"
  ]
}'

{
  "request_id": "req_9a01",
  "k_anonymity": 12,
  "l_diversity": 4,
  "risk": "low"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "dana@stonebridge.health",
  "display_name": "Dana Okafor",
  "quota_mb": 51200,
  "aliases": [
    "d.okafor@stonebridge.health"
  ]
}'

{
  "mailbox_id": "mbx_3aa91b7c",
  "email": "dana@stonebridge.health",
  "status": "active",
  "quota_mb": 51200
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/mailboxes/{mailbox_id}/messages?folder=<folder>&unread=<unread>&limit=<limit>&cursor=<cursor>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "messages": [
    {
      "id": "msg_a11c92",
      "from": "vendor@example.com",
      "subject": "Invoice #4021",
      "received_at": "2026-07-02T13:40:00Z",
      "unread": true,
      "has_attachments": true,
      "dlp_flags": [
        "pci"
      ],
      "threat_verdict": "clean"
    }
  ],
  "next_cursor": "eyJvZmZzZXQiOjUwfQ"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/messages" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "to": [
    "ops@partner.com"
  ],
  "subject": "Kickoff notes",
  "body_html": "<p>Notes attached.</p>"
}'

{
  "message_id": "msg_5f0b2210",
  "status": "queued",
  "dlp_action": "allow"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/messages/scan" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "message_id": "msg_a11c92"
}'

{
  "request_id": "req_77bd01a2",
  "verdict": "clean",
  "threats": [],
  "dlp_matches": [
    {
      "lexicon": "pci",
      "type": "card_number",
      "count": 1,
      "severity": "high"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/aliases" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "alias": "sales@stonebridge.health"
}'

{
  "alias_id": "als_66a0",
  "alias": "sales@stonebridge.health",
  "status": "active"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/distribution-lists" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "address": "care-team@stonebridge.health",
  "name": "Care Team",
  "members": [
    "dana@stonebridge.health",
    "m.okafor@stonebridge.health"
  ]
}'

{
  "list_id": "dl_90ab12",
  "address": "care-team@stonebridge.health",
  "member_count": 2
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/contacts" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Jordan Reyes",
  "emails": [
    "jordan@partner.com"
  ],
  "phones": [
    "+13055550188"
  ]
}'

{
  "contact_id": "con_4b7e",
  "name": "Jordan Reyes"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/calendar/events" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "title": "Quarterly review",
  "start": "2026-07-10T15:00:00Z",
  "end": "2026-07-10T16:00:00Z",
  "attendees": [
    "ops@partner.com"
  ]
}'

{
  "event_id": "evt_1c0d",
  "ical_uid": "1c0d@stonebridge.health",
  "status": "confirmed"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/mailboxes?ou_id=<ou_id>&status=<status>&cursor=<cursor>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "mailboxes": [
    {
      "mailbox_id": "mbx_3aa91b7c",
      "email": "dana@stonebridge.health",
      "status": "active",
      "ou_id": "ou_31b2"
    }
  ],
  "next_cursor": null
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/suspend" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "reason": "Offboarding"
}'

{
  "mailbox_id": "mbx_3aa91b7c",
  "status": "suspended"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/reset-password" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "require_change": true,
  "revoke_sessions": true
}'

{
  "mailbox_id": "mbx_3aa91b7c",
  "status": "reset",
  "temporary_password": "shown once"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X PUT "$BASE_URL/v3/mailboxes/{mailbox_id}/forwarding" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "forward_to": "team@stonebridge.health",
  "keep_copy": true
}'

{
  "mailbox_id": "mbx_3aa91b7c",
  "forward_to": "team@stonebridge.health",
  "keep_copy": true
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/send-as" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "address": "billing@stonebridge.health"
}'

{
  "send_as_id": "sa_71a0",
  "address": "billing@stonebridge.health",
  "verified": true
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/delegates" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "delegate_email": "assistant@stonebridge.health",
  "access": "full"
}'

{
  "delegate_id": "dg_8802",
  "delegate_email": "assistant@stonebridge.health",
  "access": "full"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mailboxes/{mailbox_id}/filters" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "criteria": {
    "from": "alerts@vendor.com"
  },
  "actions": {
    "label": "Alerts",
    "archive": true
  }
}'

{
  "filter_id": "flt_44b1",
  "enabled": true
}

# BASE_URL is tenant-specific — request yours from support.
curl -X PUT "$BASE_URL/v3/mailboxes/{mailbox_id}/signature" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "html": "<p>Dana Okafor — Stonebridge Health</p>",
  "append_all": true
}'

{
  "mailbox_id": "mbx_3aa91b7c",
  "status": "updated"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X PUT "$BASE_URL/v3/mailboxes/{mailbox_id}/vacation" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "enabled": true,
  "subject": "Out of office",
  "body_html": "<p>Back Monday.</p>",
  "start": "2026-07-05",
  "end": "2026-07-08"
}'

{
  "mailbox_id": "mbx_3aa91b7c",
  "vacation": "enabled"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/distribution-lists/{list_id}/members" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "newhire@stonebridge.health",
  "role": "member"
}'

{
  "list_id": "dl_90ab12",
  "email": "newhire@stonebridge.health",
  "status": "added"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/contacts?list_id=<list_id>&query=<query>&cursor=<cursor>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "contacts": [
    {
      "contact_id": "con_4b7e",
      "name": "Jordan Reyes",
      "emails": [
        "jordan@partner.com"
      ],
      "list_id": "list_partners"
    }
  ],
  "next_cursor": null
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/contact-lists" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Partners",
  "shared": true
}'

{
  "list_id": "list_partners",
  "name": "Partners",
  "shared": true
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/mail/routing-rules" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "direction": "outbound",
  "match": {
    "recipient_domain": "partner.com"
  },
  "action": {
    "require_tls": true
  }
}'

{
  "rule_id": "rr_0c71",
  "direction": "outbound",
  "enabled": true
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/vault/retention" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "ou_id": "ou_31b2",
  "retain_days": 2555,
  "action": "preserve"
}'

{
  "policy_id": "ret_9a11",
  "retain_days": 2555,
  "action": "preserve"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/vault/holds" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Matter 2026-14",
  "mailbox_ids": [
    "mbx_3aa91b7c"
  ]
}'

{
  "hold_id": "hold_5f2a",
  "name": "Matter 2026-14",
  "mailbox_count": 1,
  "status": "active"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/mailboxes/{mailbox_id}/devices" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "devices": [
    {
      "device_id": "dev_71aa",
      "model": "iPhone 16",
      "os": "iOS 20",
      "last_sync": "2026-07-02T09:00:00Z",
      "status": "approved"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/devices/{device_id}/wipe" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "type": "account"
}'

{
  "device_id": "dev_71aa",
  "status": "wipe_requested"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/chat/spaces" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Project Falcon",
  "type": "collaboration",
  "threaded": false,
  "members": [
    "dana@stonebridge.health"
  ],
  "bridged_users": [
    "usr_7d21",
    "usr_90ab"
  ]
}'

{
  "space_id": "spc_4f21a0",
  "provider": "google_chat",
  "provider_space": "spaces/AAQAtjsc9v4",
  "name": "Project Falcon",
  "type": "collaboration",
  "member_count": 2,
  "bridged_user_count": 2,
  "created_at": "2026-07-02T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/chat/spaces?as_user=<as_user>&type=<type>&cursor=<cursor>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "spaces": [
    {
      "space_id": "spc_4f21a0",
      "name": "Project Falcon",
      "type": "collaboration",
      "member_count": 2,
      "unread": true
    },
    {
      "space_id": "spc_88be10",
      "name": "Care Team",
      "type": "collaboration",
      "member_count": 5,
      "unread": false
    }
  ],
  "next_cursor": null
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/chat/spaces/{space_id}/messages" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "on_behalf_of": "usr_7d21",
  "text": "Statement batch is ready for review.",
  "reply_to": "chm_31c0aa"
}'

{
  "message_id": "chm_9f2a11",
  "space_id": "spc_4f21a0",
  "attributed_to": "usr_7d21",
  "posted_as": "integration",
  "quote": {
    "message_id": "chm_31c0aa",
    "type": "reply"
  },
  "created_at": "2026-07-02T14:05:12Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/chat/spaces/{space_id}/messages?as_user=<as_user>&since=<since>&cursor=<cursor>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "messages": [
    {
      "message_id": "chm_31c0aa",
      "sender": {
        "type": "human",
        "name": "Dana Okafor",
        "email": "dana@stonebridge.health"
      },
      "text": "Can someone confirm the July batch?",
      "reactions": [
        {
          "emoji": "👍",
          "count": 2
        }
      ],
      "attachments": [
        {
          "attachment_id": "att_55a0",
          "filename": "batch.xlsx",
          "mime_type": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
          "downloadable": true
        }
      ],
      "created_at": "2026-07-02T14:01:40Z"
    },
    {
      "message_id": "chm_9f2a11",
      "sender": {
        "type": "bridged",
        "user_id": "usr_7d21",
        "name": "Jordan Reyes"
      },
      "text": "Statement batch is ready for review.",
      "reply_to": {
        "message_id": "chm_31c0aa",
        "sender": "Dana Okafor",
        "text": "Can someone confirm the July batch?"
      },
      "created_at": "2026-07-02T14:05:12Z"
    }
  ],
  "next_cursor": null
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/chat/messages/{message_id}/reactions" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "on_behalf_of": "usr_7d21",
  "emoji": "😂",
  "mode": "attributed"
}'

{
  "message_id": "chm_31c0aa",
  "emoji": "😂",
  "state": "added",
  "mode": "attributed",
  "counts": {
    "bastion": 2,
    "workspace": 1
  }
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/chat/messages/{message_id}/attachments/{attachment_id}?as_user=<as_user>" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "attachment_id": "att_55a0",
  "filename": "batch.xlsx",
  "mime_type": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
  "size_bytes": 48210,
  "download_url": "https://files.tenant.example/att_55a0?sig=… (valid 5 minutes)"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/chat/spaces/{space_id}/members" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "m.okafor@stonebridge.health"
}'

{
  "membership_id": "chmem_71a0",
  "space_id": "spc_4f21a0",
  "type": "workspace_member",
  "status": "joined"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X PUT "$BASE_URL/v3/chat/spaces/{space_id}/access" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "user_ids": [
    "usr_7d21",
    "usr_90ab",
    "usr_31c0"
  ]
}'

{
  "space_id": "spc_4f21a0",
  "granted": 3,
  "revoked": 1
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/chat/dm" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "member_email": "dana@stonebridge.health",
  "user_id": "usr_7d21",
  "reuse": true
}'

{
  "space_id": "spc_dm_20b1",
  "created": false,
  "member": "dana@stonebridge.health",
  "bridged_user": "usr_7d21"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/chat/commands" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "command": "/dm",
  "description": "Start a private chat with a Bastion user",
  "endpoint": "https://example.com/hooks/chat-events",
  "opens_dialog": true
}'

{
  "command_id": "cmd_10ff",
  "command": "/dm",
  "endpoint": "https://example.com/hooks/chat-events",
  "opens_dialog": true,
  "verification": {
    "issuer": "events.bastion-platform",
    "audience": "https://example.com/hooks/chat-events"
  },
  "status": "active"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/chat/grants" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "admin@stonebridge.health",
  "capabilities": [
    "native_reactions",
    "media_download",
    "admin_memberships"
  ]
}'

{
  "grant_id": "cgr_44e2",
  "email": "admin@stonebridge.health",
  "capabilities": [
    "native_reactions",
    "media_download",
    "admin_memberships"
  ],
  "status": "pending_consent",
  "consent_url": "https://consent.tenant.example/cgr_44e2"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/messages/transactional" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "template_id": "tmpl_welcome",
  "to": "alex@example.com",
  "variables": {
    "first_name": "Alex"
  }
}'

{
  "message_id": "msg_tx_66a1",
  "status": "queued"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/templates" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Welcome",
  "subject": "Welcome, {{first_name}}",
  "body_html": "<p>Hi {{first_name}}</p>"
}'

{
  "template_id": "tmpl_welcome",
  "name": "Welcome"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/audiences" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "FL patients",
  "list_id": "list_partners",
  "filter": {
    "state": "FL"
  }
}'

{
  "audience_id": "aud_31c0",
  "name": "FL patients",
  "size": 1840
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v2/campaigns" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "July update",
  "audience_id": "aud_31c0",
  "template_id": "tmpl_welcome",
  "send_at": "2026-07-05T13:00:00Z"
}'

{
  "campaign_id": "camp_9f2a",
  "status": "scheduled",
  "recipients": 1840
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v2/campaigns/{campaign_id}/stats" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "campaign_id": "camp_9f2a",
  "delivered": 1815,
  "opens": 902,
  "clicks": 311,
  "bounces": 25,
  "unsubscribes": 7
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/webhooks" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "url": "https://example.com/hooks/bastion",
  "events": [
    "message.delivered",
    "message.bounced",
    "dlp.match"
  ],
  "description": "Delivery + DLP notifications"
}'

{
  "webhook_id": "wh_71a0",
  "url": "https://example.com/hooks/bastion",
  "events": [
    "message.delivered",
    "message.bounced",
    "dlp.match"
  ],
  "signing_secret": "whsec_… (shown once)",
  "status": "active"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/webhooks" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "webhooks": [
    {
      "webhook_id": "wh_71a0",
      "url": "https://example.com/hooks/bastion",
      "status": "active"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X PATCH "$BASE_URL/v3/webhooks/{webhook_id}" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "events": [
    "message.delivered",
    "message.opened",
    "message.bounced"
  ]
}'

{
  "webhook_id": "wh_71a0",
  "events": [
    "message.delivered",
    "message.opened",
    "message.bounced"
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/webhooks/{webhook_id}/rotate-secret" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "webhook_id": "wh_71a0",
  "signing_secret": "whsec_new… (shown once)",
  "previous_valid_until": "2026-07-03T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X GET "$BASE_URL/v3/webhooks/{webhook_id}/deliveries" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "deliveries": [
    {
      "delivery_id": "whd_5521",
      "event": "message.delivered",
      "status_code": 200,
      "attempts": 1,
      "at": "2026-07-02T14:03:05Z"
    },
    {
      "delivery_id": "whd_5522",
      "event": "message.bounced",
      "status_code": 500,
      "attempts": 3,
      "at": "2026-07-02T14:04:10Z"
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v3/webhooks/{webhook_id}/deliveries/{delivery_id}/replay" \
  -H "Authorization: Bearer $BASTION_API_KEY"

{
  "delivery_id": "whd_5522",
  "status": "requeued"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v1/leads/search" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "vertical": "health",
  "geo": {
    "state": "FL"
  },
  "exclusivity": "exclusive",
  "max_age_days": 1,
  "quantity": 25
}'

{
  "available": 312,
  "estimated_price": 42.5,
  "currency": "USD",
  "sample": [
    {
      "lead_id": "lead_88a1",
      "vertical": "health",
      "state": "FL",
      "age_days": 0
    }
  ]
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v1/leads/purchase" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "lead_id": "lead_88a1",
  "exclusivity": "exclusive"
}'

{
  "lead_id": "lead_88a1",
  "price": 45,
  "contact": {
    "name": "Alex Rivera",
    "phone": "+13055550188",
    "email": "alex@example.com",
    "postal_code": "33101"
  },
  "consent_certificate_url": "https://certs.example/tf_88a1",
  "purchased_at": "2026-07-02T14:03:00Z"
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v1/leads/ping" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "vertical": "auto",
  "partial": {
    "postal_code": "33101",
    "coverage": "full"
  }
}'

{
  "ping_id": "ping_2a71",
  "accepted": true,
  "bid": 18,
  "ttl_seconds": 60
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v1/leads/post" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "ping_id": "ping_2a71",
  "full": {
    "name": "Alex Rivera",
    "phone": "+13055550188",
    "email": "alex@example.com"
  }
}'

{
  "status": "sold",
  "lead_id": "lead_9c02",
  "price": 18
}

# BASE_URL is tenant-specific — request yours from support.
curl -X POST "$BASE_URL/v1/leads/{lead_id}/return" \
  -H "Authorization: Bearer $BASTION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "reason": "wrong_number"
}'

{
  "lead_id": "lead_88a1",
  "status": "accepted",
  "refund": 45
}