| Conventions | Transport, versioning, authentication (API keys, OAuth 2.1, OIDC), IDs, common fields, money and units, idempotency, errors, pagination, expansion, rate limits, test mode, security, the two interfaces | 00 |
| Shared objects | Money, measurements, contact and address, recurrence, area, messages, metadata, files and documents | Shared objects |
| Object management | Uniform list, search, retrieve, update, delete, batches, exports and retention | 10 |
| Conformance and discovery | Modules, capabilities, /.well-known configuration, the conformance suite, agent and MCP integration | 11 |
| Accounts and identity | Tenants, platforms and children, memberships, roles, API keys, SSO through any OIDC provider, token exchange | 19 |
| Integrations and interfaces | A generic OAuth app and connection wrapper with typed provider interfaces, federated onboarding | 26 |
| Webhooks and events | Signed at-least-once events, the event catalog, redelivery, inbound injection | 08 |
| Background jobs | One envelope for all asynchronous work, progress, cancel, retry, logs, recurring job schedules | 27 |
| Documents | Portable templates, generation (on demand, triggered, batch), ingestion of PDFs, scans and EDI | 25 |
| Billing and payments | Invoices with import, export and reconciliation, usage metering, price plans, balances, a provider-neutral payments interface | 28 |
| Interfaces | The REST Interface for integrators, and the GraphQL Interface for internal CRUD and back-office operations | Conventions §16, GraphQL Interface |