Out of scope
What v1 never exposes, and what may come later.
Clear boundaries for Public Integration API v1 documentation.
Never public
| Area | Examples | Reason |
|---|---|---|
| Mobile app (Curio Go) | /companies/…/mobile/* |
Client-optimized; use canonical HR routes |
| Curio Solo | /solo/* |
Separate consumer product |
| Legacy Flutter | POST /coapi.json |
Deprecated |
| Superadmin / platform | /superadmin/*, /platform/* |
Curio internal |
| Reseller portal | /reseller/* |
B2B2B internal |
| Admin / repair | /admin/*, /setup/* |
Data maintenance |
| Billing / webhooks | /billing/*, RevenueCat, Apple |
Internal |
| AI | /chat/*, dashboard AI, ai-companion |
Internal |
| Impersonation | /auth/impersonate/* |
Security |
| Calculation rules CRUD | /rules/*, AI rule parse |
Sensitive payroll config |
| Collective agreements | /collective-agreements/* |
Separate domain |
| HR write API | POST/PUT/DELETE users, manual time-entries/save |
v1 read-only (except punch) |
| Payroll export send | POST …/export/payday, dkplus, … |
Customer runs in Curio UI |
| Integration secrets | PATCH …/integrations |
Secrets never readable |
| Push tokens | /users/me/device-token |
App-only |
Punch / kiosk — what is public
| Included | See |
|---|---|
| Shared terminal punch (password) | Punch clock — Option A |
| Registered device + PIN punch | Punch clock — Option B |
| Punch list & departments (anonymous) | Same doc |
Not in v1 — may come later
| Feature | Notes |
|---|---|
| Webhooks | time-entry.locked, export completed, … |
| OAuth2 / API keys | Company-scoped credentials |
| Write HR data | Employee sync, bulk time import |
| National ID in API | Signed payroll agreements only |
| Full kiosk self-service | Timesheet edit, schedule apply on device |
Architecture diagram
┌─────────────────────────────────────────┐
│ Curio Time API │
├─────────────────────────────────────────┤
│ PUBLIC DOCS (this portal) │
│ · HR read (employees, timesheets, …) │
│ · Punch clock / kiosk clock in/out │
├─────────────────────────────────────────┤
│ INTERNAL (not documented here) │
│ · Mobile app routes │
│ · Admin, rules, billing, AI │
│ · Manual timesheet save (non-punch) │
└─────────────────────────────────────────┘Need something on the internal list? Contact Curio Time — some capabilities (e.g. full kiosk self-service) use separate partner agreements.