Origami Risk · OpenAPI Overlay 1.0.0

API Evangelist enhancements for the Origami Risk Public API

6 actions 6 updates documentation extends openapi/origami-risk-public-api-openapi.json

Derived by API Evangelist Built from the contracts Origami Risk publishes. Origami Risk did not publish this file.

View Overlay File View on GitHub Overlay Specification

What the actions change

summarydescriptiondeprecatedoperationIdexternalDocsx-apievangelist-providerx-apievangelist-enrichedx-apievangelist-spec-quality

Targets 6

$.info

$.paths['/new-endpoint'].get

$.paths['/new-endpoint-1'].get

$.paths['/HasTokenExpired'].get

$.paths['/Authentication/Authenticate'].post

$.components.securitySchemes.ApiKeyAuth

OpenAPI Overlay

overlay: 1.0.0
info:
  title: API Evangelist enhancements for the Origami Risk Public API
  version: 1.0.0
extends: openapi/origami-risk-public-api-openapi.json
x-generated: '2026-07-25'
x-method: generated
x-source: >-
  API Evangelist enrichment round 2026-07-25. The published definition is a ReadMe API
  Designer scaffold — two of its four paths are untouched placeholders. This overlay
  records that state and annotates the two real operations, without mutating the
  harvested file.
actions:
- target: $.info
  update:
    x-apievangelist-provider: origami-risk
    x-apievangelist-enriched: '2026-07-25'
    x-apievangelist-spec-quality: scaffold
    description: >-
      Registered "Origami Risk Public API" definition. It covers 4 paths against roughly
      180 operations documented as hand-authored reference pages at
      https://developers.origamirisk.com/reference — the machine-readable definition is
      not representative of the surface. Treat the reference, and the tenant's own
      metadata endpoints (GET /api/Domains, GET /api/Metadata/Domains/{domain}/DataDictionary),
      as the authoritative contract.
- target: $.paths['/new-endpoint'].get
  update:
    deprecated: true
    summary: 'PLACEHOLDER — ReadMe API Designer sample operation, not a real endpoint'
- target: $.paths['/new-endpoint-1'].get
  update:
    deprecated: true
    summary: 'PLACEHOLDER — ReadMe API Designer sample operation, not a real endpoint'
- target: $.paths['/HasTokenExpired'].get
  update:
    operationId: hasTokenExpired
    summary: Check whether the current API token has expired
    externalDocs:
      url: https://developers.origamirisk.com/reference/check-if-api-token-has-expired
- target: $.paths['/Authentication/Authenticate'].post
  update:
    operationId: authenticate
    summary: Request an API token using the simple Account/User/Password/ClientName payload
    description: >-
      Returns a token to present in the Token header on subsequent calls. Pass
      ClientName __CrossClientSessionClient to scope the token to every client the user
      can access. 401 on invalid credentials.
    externalDocs:
      url: https://developers.origamirisk.com/reference/api-token-simple
- target: $.components.securitySchemes.ApiKeyAuth
  update:
    description: >-
      Token issued by an Authenticate call, presented in the Token request header. See
      authentication/origami-risk-authentication.yml for the HMAC alternative.

Work with this as data

Every overlay here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for openapi overlays

4 MCP tools reach this

find_overlaysBrowse and filter every overlay in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This overlay

curl "https://apis.io/api/v1/overlays/origami-risk-public-api-overlay"

All openapi overlays

curl "https://apis.io/api/v1/overlays?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.