Public documents API

The Public Documents API lets browser code upload and manage a submission's documents without exposing your private API key. It provides the Documents operations using a public API key and a submission token. Requests are accepted from any origin through Cross-Origin Resource Sharing (CORS).

Authentication

You need both credentials:

Public API key: send it in the apiKey header. Create a public key (ntpub_…) in the Niva dashboard under Settings › API Keys. A private key is rejected with 401.

Submission token: replace {submission_token} in the path with the submission's token, returned by Create new submission or Get submission. Retrieve it on your server with a private key and pass it only to the applicant who should access that submission. It expires 24 hours after issue; call Get submission for a fresh token.

For example, list the submission's documents:

Replace both placeholders with your credentials.