Oosto OnAccess API
Per-deployment REST API for Oosto OnAccess, the facial access-control product (internal codename "Abraxas"), served from the customer's own OnAccess server under the /abx/api base path. Authentication is username/password exchanged for a bearer JWT at POST /abx/api/login. The enrolment flow published in the vendor's sample code posts an image as multipart/form-data to POST /abx/api/external-functions/extract-faces-from-image to extract face feature vectors, then creates the person record with POST /abx/api/members, carrying the extracted image features plus identity fields (name, email, phone, description), access-card credentials (card id + facility code) and member-group membership by UUID. As with OnWatch there is no vendor-hosted base URL — the API ships with the customer's installation. Reference documentation is behind an OTP login at knowledge.oosto.com; operations recorded here come from the vendor's public sample code.