Unicis Platform
REST API Reference — Docs
Authentication, the live OpenAPI/Swagger reference, webhooks, and known module endpoints for the Unicis Platform REST API — consolidated in one place for technical evaluation.
Premium Ultimate
Unicis Platform ships a REST API (documented with OpenAPI 3.0) so you can integrate it into your existing stack — pull evidence, push controls updates, or react to platform events from your own tooling. This page is the single starting point for the API surface; it consolidates what’s documented across individual module pages and points you to the live, always-current reference.
Live reference (Swagger / OpenAPI)
The complete, always-up-to-date API reference — every endpoint, request/response schema, and an interactive “try it” console — is served directly from your Unicis Platform instance:
https://<your-instance>/api-docsFor the Business/Cloud edition this is https://platform.unicis.tech/api-docs (requires login). For the self-hosted Community Edition, replace the host with wherever you’ve deployed the platform. This page exists so you don’t have to log in or stand up an instance just to evaluate whether the API fits your stack — but for the exhaustive, current schema, the live Swagger UI is authoritative.
Authentication
All requests authenticate via a Bearer token using an API key:
Authorization: Bearer <your-api-key>API keys carry ADMIN role permissions scoped to the team they were created for. Generate, view, copy, and revoke keys from Team Settings → API Keys — see Settings for the full walkthrough.
Endpoints by module
API coverage is rolling out module by module. Endpoints confirmed and documented so far:
| Module | Method | Endpoint | Description |
|---|---|---|---|
| Cybersecurity Controls (CSC) | GET | /api/teams/{slug}/csc | Retrieve all controls and their statuses |
| Cybersecurity Controls (CSC) | PUT | /api/teams/{slug}/csc | Update the status of a single control |
MCP Server
Premium Ultimate
In addition to the REST API, Unicis Platform ships an MCP (Model Context Protocol) server so AI assistants like Claude can read and act on your compliance data directly. See MCP Server for setup and available tools.
Webhooks
Premium Ultimate
Webhooks push events from Unicis Platform to your own endpoint as they happen — useful for syncing platform state into a SIEM, ticketing system, or internal dashboard without polling. Supported events include member.created, task.created, task.commented, tasks.updated, task.deleted, task.due_date, and more. Configure destinations and per-event routing from Team Settings → Webhooks — see Settings for details, including delivery status tracking.
Audit logs
Ultimate
Every API-driven and in-app change is recorded — user, action, timestamp, and before/after values — powered by Retraced (BoxyHQ). Self-hosted deployments can enable this via the Retraced Getting Started guide. See Settings — Audit Logs.
Need help evaluating fit?
If you’re assessing Unicis against an existing security/DevOps stack, contact us — we can walk through specific integration scenarios (SIEM ingestion, ticketing sync, custom evidence pipelines) before you commit to a plan.
Record of Processing Activities
Transfer Impact Assessment
Privacy Impact Assessment
Cybersecurity Controls
Cybersecurity Risk Management
Interactive Awareness Program