reqistry-dev Reports API

openapi: 3.2.0
info:
  title: Public APIs — Mobile Client Reports API
  description: 'API reference for the Public APIs Flutter mobile app. Includes anonymous device auth, email/password account linking, profile management, bookmarks, folders, discovery, categories, search, and legacy JSON endpoints.


    ## Authentication


    Bearer-protected endpoints require:


    ```

    Authorization: Bearer

    ```


    Tokens are obtained via `POST /v1/auth/anonymous` or `POST /v1/auth/login-email`.


    Public endpoints (no token required): `POST /submit`, `POST /v1/apis` (auth optional, enables submission attribution), `POST /v1/auth/anonymous`, `POST /v1/auth/refresh`, `POST /v1/auth/revoke`, `POST /v1/auth/login-email`, `GET /v1/recently-added`, `GET /v1/recommend` (auth optional, personalizes with bookmarks), `GET /v1/apis/{slug}`, `GET /v1/apis/{id}/alternatives`, `GET /v1/trust-scores/{id}`, `GET /v1/apis/compare`, `GET /v1/change-feed`, `GET /v1/use-case-collections`, categories (unversioned and `/v1` aliases), `GET /search`, `GET /metadata`, `POST /track`, and `POST /admin/v1/contact-messages`. Every other `/v1/*` operation requires a Bearer token.


    ## Account Types

    - **Anonymous**: Device-only, no email. Data tied to device fingerprint.

    - **Email-linked**: Has email + password. Can login from any device. Data merges on link.


    ## Token Lifecycle

    - **Access token**: 15 minutes, used for API requests

    - **Refresh token**: 30 days, used to rotate access tokens

    - Refreshing a token invalidates the old one (single-use rotation)

    - Revoking deactivates all tokens for a device'
  version: 1.0.0
  contact:
    name: Public APIs
    url: '---'
servers:
- url: http://localhost:4000
  description: Local development
- url: '---'
  description: Production
tags:
- name: Reports
paths:
  /v1/apis/{id}/reports:
    post:
      tags:
      - Reports
      summary: Report incorrect API information
      operationId: reportApiInformation
      security:
      - bearerAuth: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: uuid
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateApiReportRequest'
      responses:
        '200':
          description: Existing open report returned
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiReportResponse'
        '201':
          description: Report created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiReportResponse'
        '401':
          description: Access token required
components:
  schemas:
    ApiReportResponse:
      type: object
      properties:
        data:
          type: object
          properties:
            id:
              type: string
            status:
              type: string
              enum:
              - PENDING
              - IN_REVIEW
              - RESOLVED
              - REJECTED
            createdAt:
              type: string
              format: date-time
        deduplicated:
          type: boolean
    CreateApiReportRequest:
      type: object
      required:
      - reason
      properties:
        reason:
          type: string
          enum:
          - API_UNAVAILABLE
          - LINK_BROKEN
          - PRICING_INCORRECT
          - AUTHENTICATION_INCORRECT
          - DESCRIPTION_INCORRECT
          - DISCONTINUED
          - OTHER
        note:
          type: string
          maxLength: 2000
          nullable: true
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: Anonymous device access token from POST /v1/auth/anonymous