Skip to content
Leg 04 · Evaluate · the developer platform

your operation.addressable.

Every safety, quality and compliance record reachable by a documented REST API, an AI assistant and signed webhooks. Tenant-isolated, rate-limited and audited on every single call.

Book a walkthroughSee the platform
The machine surface
LIVEREST API v1
24endpoints
11connector tools
3.1OpenAPI contract
REST API, version 1

Read and write your records.

A documented, versioned REST API over your live operation. Records read and write, streaming export, staged imports, generated from the running system so the contract cannot drift. Every record is addressed the same way, as OCC-2026-0042, so the reference on the page is the reference in the call.

v1
REST API, live
24
Endpoints
11
Connector tools
Get the OpenAPI 3.1 spec
GET /api/v1/records200 OK
GET /api/v1/records?module=sms
Authorization: Bearer $EAVIORA_API_KEY
{
  "data": [
    {
      "reference": "OCC-2026-0042",
      "module": "sms",
      "stage": "investigation",
      "title": "Unusual vibration on approach, ILS RWY 25L"
    }
  ],
  "next_cursor": null
}
Tenant-isolated · rate-limited · audit-logged
Read tools · 6
list_modulessearch_recordsget_recordget_record_linksget_import_joblist_export_jobs
Write tools · 5
create_recordupdate_recordlink_recordsstart_csv_importrequest_export
ENDPOINT/api/mcp/mcpstreamable · bearer · audited
Reachable by a copilot

Connect an AI assistant.

eAviora is a connector, so a copilot can read and act on your live operation in plain language. Eleven tools ride the same authorization stack as the app, tenant-isolated and audited on every call, and never a step outside your role.

No keys to paste. Add eAviora as a connector in Claude. Your team consents in-app and acts under their exact role.

Short-lived, rotating tokens. One-hour access with a thirty-day rotating refresh, so a leaked token expires fast.

Scoped consent. The user grants read, or read and write, and sees exactly what they hand over.

Governed by design

Automation cannot bypass sign-off.

The reason a regulated operator can open its API. Speed on the read and write paths, without ever losing control of the record.

State stays locked. Workflow and governance state cannot be set through the API or the connector. Only a named person moves a record.

A person accepts every write. Machine tools propose. Nothing reaches the record until someone validates it, enforced in code, not policy.

Audited in the same transaction. Every call is logged under the key identity, in the same transaction as the change it made.

NORTHGALE AIR · SYNTHETIC OPERATION
OCC-2026-0042CLASSIFIED · LOCKED
Title
Unusual vibration on approach, ILS RWY 25L
Module and stageSYS
sms · investigation
ICAO classificationAI · 94%
Loss of control, in-flight (LOC-I)
Workflow state
Advanced by a named person, never by a machine call.
Outbound webhooks

Signed, retried, replayable.

Subscribe to record events and verify them with the official zero-dependency SDK. It runs on Node, Deno, Bun, Cloudflare Workers and the browser.

Signed with HMAC-SHA256. Every delivery is signed over the timestamp and body, then verified in constant time.

Checked before it is saved. Every webhook address is validated against an SSRF blocklist on write.

Retried on failure. Ten deliveries with exponential backoff, so a blip never loses an event.

Rotate the secret any time. The signing secret is shown once on create, and you can roll it whenever you need.

Install the SDKEvent catalog
Enterprise ready

Plug into your identity provider.

The answers a security questionnaire asks for, built in. Single sign-on, automated provisioning, a rate-limit contract, and isolation enforced at the database.

SSO

Plug into your identity provider. SAML 2.0 with Okta, Microsoft Entra and Google, single sign-on enforced, with just-in-time provisioning.

SCIM

Provision automatically. SCIM 2.0 auto-provision and deprovision, so a leaver loses access without a manual step.

MFA

Passkeys and multi-factor. Modern sign-in with passkeys and multi-factor, turned on by policy, not left to the user.

LIMITS

Rate limits as a contract. Per-tier ceilings the platform enforces, so you can plan batch imports and polling against documented limits.

ISO

Isolated at the database. Tenant isolation enforced against a non-bypass role. A query missing your operation returns zero rows.

DATA

Canadian residency. Data hosted in Canada, encrypted at rest, with a named sub-processor register.

Read the trust posture
Design partner cohort · open

One operation. One API. One audit trail.

Tenant isolation in the database.Row-level security, not app-code filtering. One tenant can never read another.
Governed writes.Workflow and governance state is never settable by a machine. A person moves the record.
Your data never trains a model.Tenant data is not used to improve our AI for anyone else. Ever.
● 01 WHY● 02 THE SHIFT● 03 PLATFORM◉ 04 EVALUATE○ 05 ADOPT
Next leg
05 · Adopt it

The machine surface passes the review. The next leg is the experience: demo to production, with the design partner cohort.

Continue: AdoptDivert: talk to us