generated: '2026-07-18'
method: derived
source: https://dev.apptopia.com/
standards:
  - id: jwt-bearer
    conforms: true
    evidence: Authentication uses JSON Web Tokens sent in the Authorization header.
  - id: iso8601-dates
    conforms: true
    evidence: All dates use ISO 8601 (YYYY-MM-DD).
  - id: https-only
    conforms: true
    evidence: All endpoints are accessed over HTTPS.
  - id: cursor-pagination
    conforms: true
    evidence: Discovery endpoints paginate via opaque next_page_token cursors.
  - id: oauth2
    conforms: false
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors are plain JSON with HTTP status codes; no application/problem+json.
  - id: json-api
    conforms: false
  - id: odata
    conforms: false
  - id: rfc8594-sunset
    conforms: false