API REFERENCE · READ SURFACE

The wire, machine-readable.

The real endpoint surface behind The Dossier Wire — documented honestly. Public reads and authenticated reads are built and staged; they enter service after the external penetration test signs off. The subscribe endpoint is live today.

Endpoint	What it returns	Auth	Status
`GET /api/feed`	The wire feed. Params: `wire` (defaults to the host you call), `desk`, `q` (full-text on headline/standfirst). Live items only, newest first.	public	STAGED — PENDING PEN-TEST
`GET /api/frontpage`	Today’s front page — issue number, date and ranked slots. Param: `wire` (defaults to the host).	public	STAGED — PENDING PEN-TEST
`GET /api/editorial/snapshot`	The editorial snapshot — desks, counts, latest issue state. Clearance L3+.	session cookie	STAGED — PENDING PEN-TEST
`GET /api/editorial/records?q=`	Records search — parameter-bound LIKE on title across the document register. Clearance L3+.	session cookie	STAGED — PENDING PEN-TEST
`POST /api/list/subscribe`	Newsletter list subscribe — the endpoint behind every form on this site.	public	LIVE

curl examples

# Public reads (staged surface — same shape on the live domain) curl -s "https://thedwire.com/api/feed?desk=memos&q=sanctions" curl -s "https://thedwire.com/api/frontpage" # Authenticated reads — session cookie issued at sign-in (L3+ clearance) curl -s -H "Cookie: wsi_sess=<session>" "https://thedwire.com/api/editorial/snapshot" curl -s -H "Cookie: wsi_sess=<session>" "https://thedwire.com/api/editorial/records?q=treasury" # Live today curl -s -X POST "https://thedwire.com/api/list/subscribe" \ -H "Content-Type: application/json" \ -d '{"email":"you@example.com","source":"api-docs"}'

Authentication

Today, authenticated reads use the wsi_sess session cookie issued at sign-in — clearance L3+ for editorial reads. Per-account token keys (Authorization: Bearer) are issued at Console / Bureau activation and replace cookie auth for server-to-server use. Webhook delivery is configured at activation on tiers that carry it.

Rate limits

Access	Rate limit	Notes
Public (anonymous)	`60 req / min / IP`	Feed and front page reads. Cached at the edge.
Member session	`120 req / min`	Session-cookie reads, per account.
Token key (Console / Bureau)	`600 req / min`	Issued at activation, with webhook delivery where the tier carries it.

Launch policy, enforced at the edge — final numbers are confirmed on your activation sheet. Sustained scraping or redistribution is a terms violation, not a rate-limit problem.

MEMBER CADENCE — The Wire continuously, as files clear verification · daily digest each morning · Quarterly Intelligence Brief each quarter (Console Pro) · corrections-first feed as issued · watchlist alerts in under 60 seconds (Console).