Skip to content
Getting Started
/
/
/
(NEW!) List Security Temp...

API Endpoint Reference (1.5)

Tenovos has introduced version 1.5 to provide non-breaking improvements over previous versions.

Key Changes:

  • Authentication Standards now include OAuth2 code flow.
  • Client ID is no longer required to be passed when requesting an Authorization token using our Standard Auth from v1.4
  • New endpoints have been added and will continue to be added until v2 is generally available to all customers.
    • Adaptive Template endpoints
    • A new Get Asset endpoint with a simplified Response
    • A new Create Asset endpoint with simplified payloads for the Request and Response
    • A new Update Asset endpoint with simplified payloads for the Request and Response
    • Metadata Admin API endpoints for managing Attributes, Groups, and Templates
  • We've made some performance improvements to most endpoints
Find out more about Tenovos
Download OpenAPI description
Download OpenAPI spec (YAML)
Download OpenAPI spec (JSON)
Overview
E-mail
product@tenovos.com
License
Tenovos Active Story Management
Terms of Service
Languages
Servers
https://api.uat.tenovos.io/v1
https://api.tenovos.io/v1

ACTIONS

Invoke the Action API to retrieve information about invoked Actions.

Operations

ADAPTIVE TEMPLATES

Invoke the API to retrieve information about invoked Actions.

Operations

ASSETS

Invoke the Asset API to create, retrieve, manipulate, and share Assets. This API also provides operations to manage Asset relationships and download Asset content.

Operations

AUTHENTICATION

Invoke the Authentication API to generate, refresh, and revoke access tokens. An access token is required to perform any authorized API operation.

Operations

CDN (Coming Soon!)

Tenovos Content Delivery Network (CDN) - Coming Soon!

Tenovos CDN: Pull Zone Overview

Tenovos CDN provides global content acceleration and optimization through a pull zone architecture, ensuring that your assets are delivered to end users with maximum speed, reliability, and efficiency. A Content Delivery Network (CDN) works by caching static content—such as images, videos, and other media—on servers distributed across the globe. When an asset is requested, the CDN serves it from the nearest edge location, reducing load times and offloading traffic from the origin server, which in this case is Tenovos DAM.

A pull zone is the core mechanism that powers this system. It automatically fetches content from the origin the first time it is requested, then caches it at the edge. Subsequent requests are served directly from the CDN cache, improving response times and reducing bandwidth consumption.

Through the Tenovos CDN API, you can create, update, and manage pull zones programmatically. Pull zones support advanced features such as global edge caching, cache purging, bandwidth controls, and real-time performance statistics like cache hit rate and geographic request distribution. Optional optimization settings allow you to enhance performance further by enabling image compression, WebP and AVIF support, and content minification.

With just a few API calls, you can fully integrate high-performance content delivery into your Tenovos workflows—no complex infrastructure required.

Operations

COLLECTIONS

Invoke the Collection API to create, retrieve, edit, and delete Collections. Collections are used to group and catalog related Assets for quick access and consumption. Collections can be configured as:

  • private: Visible only to the user who created the Collection.
  • secured: Visible to users with.

When retrieving the Assets within a Collection, the requesting user will only see the Assets that the user has access to view. For example, a librarian may see all Assets within a Collection, but a general consumer user may only see a portion of those Assets, due to limited security access.

Operations

METADATA

Invoke the Metadata API to manage Metadata Attributes, Groups, and Templates. A Metadata Template defines a set of Metadata Attributes of varying types, including Text, Date, Controlled Vocabulary, Tabular, and Cascading Attributes. When a Metadata Template is assigned to a new Asset, the corresponding Metadata Attributes will be available for population on the Asset.

Admin Endpoints (NEW!): Create, read, update, and delete Metadata Attributes and Metadata Groups. These endpoints require the Metadata Management admin privilege.

Operations

REQUESTS

Invoke these API's to create new Requests and manage existing Requests.

Operations

SECURITY

Invoke the Security API to manage Security Templates, Security Roles, Security User Groups, and the Permissions and Privileges that control what a user can see and do across the platform.

Operations

(NEW!) Create Security Template

Request

Create a security, rights, or access template for the authenticated customer.

Business Rules:

  • name must be trimmed, non-empty, and unique per customer.
  • type is set only at creation and is immutable thereafter.
  • Every groups[].id and permissionIds[] entry must be a well-formed UUID and must exist for the customer (groups) or in the permission catalog (permissions). Unknown ids are rejected with 422, not silently dropped.
  • Duplicate group ids in the same request are rejected.

Defaults:

  • type defaults to security-template.
  • groups defaults to [].

The response body is returned in the same shape as GET /security/templates/{id}, so the UI can render the created template with no follow-up read.

The user submitting the request must have the Security Template Management admin privilege.

Security
ApiKeyAuth or BasicAuth
Headers
X-API-Keystringrequired

Customer-specific API key required to invoke API.

Authorizationstringrequired

Provided by Authentication Token creation operation.

Content-Typestringrequired
Value"application/json"
Bodyapplication/jsonrequired

JSON object describing the template to create. Required: name. Optional: type (defaults to security-template), groups (defaults to []).

namestringrequired

Display name of the template. Trimmed, non-empty, maximum 75 characters. Must be unique per customer.

Example: "Confidential"
typestring

Template classification. Defaults to security-template. Set only at creation; immutable thereafter.

Default "security-template"
Enum"security-template""rights-template""access-template"
Example: "security-template"
groupsArray of objects

Groups to assign to the template, each with the permissions granted to it. Defaults to []. Duplicate group IDs are rejected.

Default []
curl -i -X POST \
  https://api.uat.tenovos.io/v1/security/templates \
  -H 'Authorization: string' \
  -H 'Content-Type: application/json' \
  -H 'X-API-Key: YOUR_API_KEY_HERE' \
  -d '{
    "name": "Confidential",
    "type": "security-template",
    "groups": [
      {
        "id": "f22dccbc-6032-4279-9f19-d5dc91d9757e",
        "permissionIds": [
          "31bdde6b-1a2c-4d5e-8f90-1234567890ab",
          "9e187a4e-cfe4-419e-8c6c-2509e4bf400b"
        ]
      },
      {
        "id": "dbf4f3d4-fd66-49ec-ad20-dbe3b142a8c9",
        "permissionIds": []
      }
    ]
  }'

Responses

Created. The response body is the new template in the same shape as GET /security/templates/{id}, including the first page of groups.

Headers
Locationstring

Path of the newly created template, e.g. /security/templates/{id}.

Bodyapplication/json
idstring(uuid)

Unique ID of the template.

Example: "a9380047-07d7-48aa-b4b7-474d00f0f428"
namestring

Display name of the template.

Example: "Confidential"
typestring

Template classification. Set at creation and immutable thereafter.

Enum"security-template""rights-template""access-template"
Example: "security-template"
groupCountinteger

Total number of groups on the template, across all pages.

Example: 2
permissionCountinteger

Total number of permissions granted across all groups, including the watermark permission.

Example: 3
createdBystring(uuid)

User ID of the template's creator.

Example: "dc63db1b-1e63-43bc-877e-418931b6895c"
createdEpochinteger

Unix timestamp (ms) of creation.

Example: 1773070355217
createdDatestring(date-time)

ISO 8601 creation date.

Example: "2026-03-09T15:32:35.217Z"
lastUpdatedBystring(uuid)

User ID of the user who last updated the template.

Example: "dc63db1b-1e63-43bc-877e-418931b6895c"
lastUpdatedEpochinteger

Unix timestamp (ms) of the last update. Pass this value back as expectedLastUpdatedEpoch on PATCH to guard against concurrent edits.

Example: 1773070355217
lastUpdatedDatestring(date-time)

ISO 8601 last updated date.

Example: "2026-03-09T15:32:35.217Z"
groupsobject

Page of groups assigned to the template.

Response
application/json
{
  "id": "a9380047-07d7-48aa-b4b7-474d00f0f428",
  "name": "Confidential",
  "type": "security-template",
  "groupCount": 2,
  "permissionCount": 3,
  "createdBy": "dc63db1b-1e63-43bc-877e-418931b6895c",
  "createdEpoch": 1773070355217,
  "createdDate": "2026-03-09T15:32:35.217Z",
  "lastUpdatedBy": "dc63db1b-1e63-43bc-877e-418931b6895c",
  "lastUpdatedEpoch": 1773070355217,
  "lastUpdatedDate": "2026-03-09T15:32:35.217Z",
  "groups": {
    "totalCount": 2,
    "items": [ … ],
    "pageInfo": { … }
  }
}

(NEW!) List Security Templates Available to Current User

Request

Retrieve the security, rights, or access templates the authenticated user may act on — either templates the user can view, or templates that grant the user a specific permission. Returns only id and name, suited to populating a template picker for ingest, edit, or delete flows.

Business Rules:

  • When permissionId is omitted, returns templates the user has view access to (resolved from the user's group membership).
  • When permissionId is provided, returns only templates where at least one of the user's groups is granted that permission.
  • Templates with no visible groups, and groups with no remaining permissions after filtering, are excluded.

Defaults:

  • type defaults to security-template.
  • limit defaults to 100.

The requesting user must be authenticated.

Security
ApiKeyAuth or BasicAuth
Query
permissionIdstring(uuid)

Permission ID to check. When provided, only templates granting this permission to one of the user's groups are returned. When omitted, templates the user can view are returned.

Example: permissionId=31bdde6b-1a2c-4d5e-8f90-1234567890ab
typestring

Template classification to list. Defaults to security-template.

Default "security-template"
Enum"security-template""rights-template""access-template"
limitinteger

Number of results to return per page. Defaults to 100.

Default 100
Example: limit=100
cursorstring

Opaque cursor for pagination. Omit on the first request. Use the nextCursor value from the previous response for subsequent pages.

Headers
X-API-Keystringrequired

Customer-specific API key required to invoke API.

Authorizationstringrequired

Provided by Authentication Token creation operation.

curl -i -X GET \
  'https://api.uat.tenovos.io/v1/security/templates/user?permissionId=31bdde6b-1a2c-4d5e-8f90-1234567890ab&type=security-template&limit=100&cursor=string' \
  -H 'Authorization: string' \
  -H 'X-API-Key: YOUR_API_KEY_HERE'

Responses

Templates the current user may act on.

Bodyapplication/json
templatesArray of objects
pageInfoobject
Response
application/json
{
  "templates": [
    { … }
  ],
  "pageInfo": {
    "hasNextPage": false,
    "nextCursor": null
  }
}

(NEW!) Get Security Template

Request

Retrieve full detail for a single security, rights, or access template — header fields plus a paginated page of its groups, each with its permissions.

Defaults:

  • includePermissions defaults to true.
  • groupLimit defaults to 100.

Pagination:

  • Loop on groups.pageInfo.nextCursor, passing it back as groupCursor, until groups.pageInfo.hasNextPage is false.

The user submitting the request must have the Security Template Management admin privilege.

Security
ApiKeyAuth or BasicAuth
Path
templateIdstring(uuid)required

The unique ID of the security template.

Example: a9380047-07d7-48aa-b4b7-474d00f0f428
Query
includePermissionsboolean

When true, each group includes its permissions array. Defaults to true.

Default true
groupLimitinteger

Number of groups to return per page. Defaults to 100.

Default 100
Example: groupLimit=100
groupCursorstring

Opaque cursor for paging the template's groups. Omit on the first request. Use groups.pageInfo.nextCursor from the previous response for subsequent pages.

Headers
X-API-Keystringrequired

Customer-specific API key required to invoke API.

Authorizationstringrequired

Provided by Authentication Token creation operation.

curl -i -X GET \
  'https://api.uat.tenovos.io/v1/security/templates/a9380047-07d7-48aa-b4b7-474d00f0f428?includePermissions=true&groupLimit=100&groupCursor=string' \
  -H 'Authorization: string' \
  -H 'X-API-Key: YOUR_API_KEY_HERE'

Responses

Full detail of the security template.

Bodyapplication/json
idstring(uuid)

Unique ID of the template.

Example: "a9380047-07d7-48aa-b4b7-474d00f0f428"
namestring

Display name of the template.

Example: "Confidential"
typestring

Template classification. Set at creation and immutable thereafter.

Enum"security-template""rights-template""access-template"
Example: "security-template"
groupCountinteger

Total number of groups on the template, across all pages.

Example: 2
permissionCountinteger

Total number of permissions granted across all groups, including the watermark permission.

Example: 3
createdBystring(uuid)

User ID of the template's creator.

Example: "dc63db1b-1e63-43bc-877e-418931b6895c"
createdEpochinteger

Unix timestamp (ms) of creation.

Example: 1773070355217
createdDatestring(date-time)

ISO 8601 creation date.

Example: "2026-03-09T15:32:35.217Z"
lastUpdatedBystring(uuid)

User ID of the user who last updated the template.

Example: "dc63db1b-1e63-43bc-877e-418931b6895c"
lastUpdatedEpochinteger

Unix timestamp (ms) of the last update. Pass this value back as expectedLastUpdatedEpoch on PATCH to guard against concurrent edits.

Example: 1773070355217
lastUpdatedDatestring(date-time)

ISO 8601 last updated date.

Example: "2026-03-09T15:32:35.217Z"
groupsobject

Page of groups assigned to the template.

Response
application/json
{
  "id": "a9380047-07d7-48aa-b4b7-474d00f0f428",
  "name": "Confidential",
  "type": "security-template",
  "groupCount": 34,
  "permissionCount": 12,
  "createdBy": "dc63db1b-1e63-43bc-877e-418931b6895c",
  "createdEpoch": 1773070355217,
  "createdDate": "2026-03-11T14:32:35Z",
  "lastUpdatedBy": "dc63db1b-1e63-43bc-877e-418931b6895c",
  "lastUpdatedEpoch": 1773070399999,
  "lastUpdatedDate": "2026-03-11T15:00:00Z",
  "groups": {
    "totalCount": 34,
    "items": [ … ],
    "pageInfo": { … }
  }
}

PEOPLE

Invoke the User API to retrieve User profile information.

Operations

STORY BOARDS

Invoke the Story Boards API to retrieve and manage Story Boards. Story Boards are curated content experiences that combine collections, saved searches, and other content blocks into a single shareable view.

Coming Soon: Additional endpoints for creating, updating, and deleting Story Boards.

Operations

WEBHOOKS

Tenovos Webhook Subscriptions

For more information about our Webhooks, see the Webhook section of our Developer Portal

Operations

PROOFING

Operations