Reference

The precise, lookup-oriented material: anything a third party can’t reconstruct from guesswork. Dense on purpose.

• REST API — generated from the OpenAPI spec, grouped by domain (activations, entitlements, sessions, products, assets, admin, observability).
• Webhook events — the full catalog of emittable events, the envelope, and the signing scheme.
• Error codes — the application/problem+json contract (RFC 9457).
• Glossary — terms used across the docs.

Auth & scopes {#auth}

Draft

A dedicated auth & scopes reference is being written. In short: MonetizeIt uses OAuth 2.0 / OIDC. Scopes are space-separated in the scope claim and matched with wildcards (e.g. provision.entitlements.*), at verb granularity (*.read vs *.create). Your application authenticates with the client-credentials grant; your users with the password grant.