generated: '2026-07-19'
method: derived
source: openapi/figure-eight-openapi-original.json
note: >-
  Standards conformance derived from the OpenAPI structure and documented auth
  model. No published compliance program (SOC 2 / ISO 27001 / etc.) was found for
  the Figure Eight surface, so no Compliance pointer is emitted.
standards:
- id: openapi-3.0
  conforms: true
  evidence: Published OpenAPI 3.0.0 document (SwaggerHub CrowdFlower/FigureEightAPI).
- id: rest-json
  conforms: true
  evidence: RESTful API returning application/json responses.
- id: oauth2
  conforms: false
  evidence: No oauth2 securityScheme; authentication is API-key (key query parameter).
- id: rfc9457-problem-details
  conforms: false
  evidence: 4xx bodies are plain JSON messages, not application/problem+json.
- id: pagination
  conforms: true
  evidence: Collection endpoints paginate via a page query parameter.
- id: webhooks
  conforms: true
  evidence: Per-job callback URL via job[webhook_uri].
- id: idempotency
  conforms: false
  evidence: No idempotency-key contract documented.