Chrome Extension API

Sanctum Bearer token-authenticated endpoints used by the FinelySourced Chrome extension. A machine-readable OpenAPI 3 description is published at /openapi.yaml. API health is available at /healthz.

Authentication

Send Authorization: Bearer <token>. A fresh extension can provision a scoped anonymous token without signup via POST /api/extension/anonymous-token.

Endpoints

• POST /api/extension/anonymous-token — provision a zero-signup extension token
• POST /api/scans — store a page scan log
• GET /api/scans/{workflowToken} — read a stored scan
• GET /api/products/similar — find similar catalog products