API Reference

Programmatic access to Attested via API keys and the Model Context Protocol.

Authentication

Attested supports two authentication methods.

API Keys

Generate an API key in Settings > API Keys. Keys start with the prefix atst_ and are shown once at creation. Store them securely.
Include the key in the Authorization header:

Authorization: Bearer atst_your_key_here

API keys provide the same access as your logged-in session. Treat them like passwords. Revoke compromised keys immediately in Settings.

OAuth 2.1 (MCP Clients)

When connecting through Claude or another MCP client, authentication uses OAuth 2.1 with PKCE. The client handles this automatically. You log into Attested once, authorize the connection, and the client manages token refresh. See the Claude Integration guide for details.

Base URL

All API requests use:

https://www.attested.legal/api

Include www in the URL. Requests to the apex domain (attested.legal without www) will redirect, which can cause authentication headers to be stripped.

MCP Server

The Attested MCP server is available at:

https://www.attested.legal/api/mcp

It implements the Model Context Protocol (streamable HTTP transport) and exposes 10 tools for evidence management. Any MCP-compatible client can connect.

Supported authentication

OAuth 2.1 with PKCE (used by Claude and other MCP clients with automatic authentication)
API key authentication (Bearer token with atst_ prefix)

Discovery endpoints

/.well-known/oauth-protected-resource
/.well-known/oauth-authorization-server

Dynamic Client Registration

POST /oauth/register

Tools

All 10 evidence tools exposed by the MCP server. Each tool accepts JSON parameters and returns a JSON response.

list_cases

Lists all cases for the authenticated user.

Parameters

None.

Example response

{
  "cases": [
    {
      "id": "8b3a1c20-2c2b-4f55-9d11-7d8a0f1c2e4a",
      "name": "Martinez v. Greenfield Properties LLC",
      "case_number": "2026-CV-03841",
      "court": "Eastern District of Louisiana",
      "jurisdiction": "federal",
      "file_count": 7,
      "created_at": "2026-03-20T15:00:00Z"
    }
  ]
}

Access: All paid tiers

list_evidence

Lists all evidence files in a case.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "files": [
    {
      "id": "c14e7b2d-3a8f-4e2a-bc18-9a4f1d6e0c3b",
      "filename": "Lease_Agreement.pdf",
      "sha256_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
      "bates_number": "MART-0001",
      "upload_date": "2026-05-13T17:07:41Z",
      "file_type": "application/pdf",
      "size_bytes": 706
    }
  ]
}

Access: All paid tiers

generate_certificate

Generates an FRE 902(13) authentication certificate.

Parameters

asset_id: string, required. UUID of the evidence file.

Example response

{
  "certificate_id": "44a96a05b3a8",
  "asset_name": "Lease_Agreement.pdf",
  "sha256_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
  "certificate_url": "https://www.attested.legal/api/certificates/44a96a05b3a8?type=902_13",
  "generated_at": "2026-05-13T18:25:04Z"
}

Access: Professional and Enterprise

extract_timeline

Extracts a chronological timeline from case evidence. If no timeline exists, triggers extraction automatically.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "events": [
    {
      "date": "2024-01-01",
      "description": "Lease agreement effective date",
      "source_file": "Lease_Agreement.pdf",
      "source_page": 1
    }
  ],
  "total_events": 5,
  "status": "ready"
}

Access: All paid tiers

find_duplicates

Finds duplicate files within a case by SHA-256 hash comparison.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "groups": [
    {
      "primary_file": {
        "asset_id": "9f1a3b4c-5d6e-4f70-8190-a2b3c4d5e6f7",
        "filename": "Photo_Kitchen.png"
      },
      "duplicates": [
        {
          "asset_id": "b7c8d9e0-1f2a-3b4c-5d6e-7f8091a2b3c4",
          "filename": "Photo_Bathroom.png"
        }
      ],
      "similarity_score": 1.0,
      "match_type": "exact_hash",
      "sha256_hash": "e03349c1a8b2d6f47e5c91b3a8c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70a1b2c3d"
    }
  ],
  "total_duplicates": 1
}

Access: All paid tiers

generate_motion

Generates a court-formatted motion draft.

Parameters

case_id: string, required. UUID of the case.

motion_type: string, required. One of "motion to compel", "motion in limine", "motion for summary judgment", "motion to dismiss", "motion to suppress", "motion for protective order", "motion for continuance", "motion to strike".

arguments: string, required. Key arguments or facts for the motion.

Example response

{
  "motion_id": "e2f1a3b4-c5d6-4e70-9182-a3b4c5d6e7f8",
  "motion_type": "motion to compel",
  "court": "Eastern District of Louisiana",
  "download_url": "https://www.attested.legal/api/motions/e2f1a3b4-c5d6-4e70-9182-a3b4c5d6e7f8/export?format=pdf",
  "generated_at": "2026-05-13T18:40:10Z"
}

Access: All paid tiers

generate_research_query

Converts plain English into a Boolean search query.

Parameters

description: string, required. The research question.

platform: string, required. One of "westlaw", "lexis", or "google_scholar".

Example response

{
  "query": "(premis! /s liabilit!) & landlord & (notice /5 defect!)",
  "platform": "westlaw",
  "explanation": "This query searches for premises liability cases involving landlords with notice of a defect."
}

Access: All paid tiers

verify_integrity

Recomputes a file’s SHA-256 hash and compares it to the stored value.

Parameters

asset_id: string, required. UUID of the evidence file.

Example response

{
  "verified": true,
  "original_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
  "computed_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
  "file_name": "Lease_Agreement.pdf",
  "upload_date": "2026-05-13T17:07:41Z"
}

Access: All paid tiers

ai_review

Runs AI document review detecting document type, key facts, entities, and potential issues.

Parameters

asset_id: string, required. UUID of the evidence file.

Example response

{
  "review_id": "5a6b7c8d-9e0f-4a1b-bc2d-3e4f5a6b7c8d",
  "document_type": "medical_record",
  "summary": "Medical records summary for patient Sarah Chen documenting treatment at Apex Medical Group between March 2024 and January 2025.",
  "key_findings": [
    {
      "fact": "Treatment date range March 2024 to January 2025",
      "source": "document header"
    }
  ],
  "entities": {
    "people": ["Sarah Chen", "Dr. R. Tran"],
    "organizations": ["Apex Medical Group"],
    "dates": ["March 2024", "January 2025"]
  },
  "review_date": "2026-05-13T18:25:48Z"
}

Access: Professional (50/month), Enterprise (250/month)

get_case_summary

Returns aggregate case statistics.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "case_name": "Martinez v. Greenfield Properties LLC",
  "case_number": "2026-CV-03841",
  "court": "Eastern District of Louisiana",
  "jurisdiction": "federal",
  "total_files": 7,
  "timeline_events": 5,
  "duplicate_groups": 1,
  "reviews_completed": 0,
  "certificates_generated": 1,
  "created_at": "2026-03-20T15:00:00Z"
}

Access: All paid tiers

Errors

All tools return errors in a consistent format:

{
  "error": true,
  "message": "Human-readable description",
  "code": "ERROR_CODE"
}

Error codes

UNAUTHORIZED: Invalid or missing authentication.

NOT_FOUND: Case or evidence file not found.

FORBIDDEN: You do not have access to this resource.

TIER_RESTRICTED: Feature requires a higher subscription tier.

INVALID_INPUT: Missing or invalid parameters.

INTERNAL_ERROR: Unexpected server error.

Rate limits

The API is rate-limited to prevent abuse. Current limits are generous and sufficient for normal usage. If you receive a 429 response, wait a few seconds and retry.

Support

API questions: anthony@attested.legal
Security concerns: security@attested.legal

Back to Documentation Claude Integration

attested.

API Reference

Programmatic access to Attested via API keys and the Model Context Protocol.

Authentication

Attested supports two authentication methods.

API Keys

Generate an API key in Settings > API Keys. Keys start with the prefix atst_ and are shown once at creation. Store them securely.
Include the key in the Authorization header:

Authorization: Bearer atst_your_key_here

API keys provide the same access as your logged-in session. Treat them like passwords. Revoke compromised keys immediately in Settings.

OAuth 2.1 (MCP Clients)

Base URL

All API requests use:

https://www.attested.legal/api

Include www in the URL. Requests to the apex domain (attested.legal without www) will redirect, which can cause authentication headers to be stripped.

MCP Server

The Attested MCP server is available at:

https://www.attested.legal/api/mcp

It implements the Model Context Protocol (streamable HTTP transport) and exposes 10 tools for evidence management. Any MCP-compatible client can connect.

Supported authentication

OAuth 2.1 with PKCE (used by Claude and other MCP clients with automatic authentication)
API key authentication (Bearer token with atst_ prefix)

Discovery endpoints

/.well-known/oauth-protected-resource
/.well-known/oauth-authorization-server

Dynamic Client Registration

POST /oauth/register

Tools

All 10 evidence tools exposed by the MCP server. Each tool accepts JSON parameters and returns a JSON response.

list_cases

Lists all cases for the authenticated user.

Parameters

None.

Example response

{
  "cases": [
    {
      "id": "8b3a1c20-2c2b-4f55-9d11-7d8a0f1c2e4a",
      "name": "Martinez v. Greenfield Properties LLC",
      "case_number": "2026-CV-03841",
      "court": "Eastern District of Louisiana",
      "jurisdiction": "federal",
      "file_count": 7,
      "created_at": "2026-03-20T15:00:00Z"
    }
  ]
}

Access: All paid tiers

list_evidence

Lists all evidence files in a case.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "files": [
    {
      "id": "c14e7b2d-3a8f-4e2a-bc18-9a4f1d6e0c3b",
      "filename": "Lease_Agreement.pdf",
      "sha256_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
      "bates_number": "MART-0001",
      "upload_date": "2026-05-13T17:07:41Z",
      "file_type": "application/pdf",
      "size_bytes": 706
    }
  ]
}

Access: All paid tiers

generate_certificate

Generates an FRE 902(13) authentication certificate.

Parameters

asset_id: string, required. UUID of the evidence file.

Example response

{
  "certificate_id": "44a96a05b3a8",
  "asset_name": "Lease_Agreement.pdf",
  "sha256_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
  "certificate_url": "https://www.attested.legal/api/certificates/44a96a05b3a8?type=902_13",
  "generated_at": "2026-05-13T18:25:04Z"
}

Access: Professional and Enterprise

extract_timeline

Extracts a chronological timeline from case evidence. If no timeline exists, triggers extraction automatically.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "events": [
    {
      "date": "2024-01-01",
      "description": "Lease agreement effective date",
      "source_file": "Lease_Agreement.pdf",
      "source_page": 1
    }
  ],
  "total_events": 5,
  "status": "ready"
}

Access: All paid tiers

find_duplicates

Finds duplicate files within a case by SHA-256 hash comparison.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "groups": [
    {
      "primary_file": {
        "asset_id": "9f1a3b4c-5d6e-4f70-8190-a2b3c4d5e6f7",
        "filename": "Photo_Kitchen.png"
      },
      "duplicates": [
        {
          "asset_id": "b7c8d9e0-1f2a-3b4c-5d6e-7f8091a2b3c4",
          "filename": "Photo_Bathroom.png"
        }
      ],
      "similarity_score": 1.0,
      "match_type": "exact_hash",
      "sha256_hash": "e03349c1a8b2d6f47e5c91b3a8c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70a1b2c3d"
    }
  ],
  "total_duplicates": 1
}

Access: All paid tiers

generate_motion

Generates a court-formatted motion draft.

Parameters

case_id: string, required. UUID of the case.

arguments: string, required. Key arguments or facts for the motion.

Example response

{
  "motion_id": "e2f1a3b4-c5d6-4e70-9182-a3b4c5d6e7f8",
  "motion_type": "motion to compel",
  "court": "Eastern District of Louisiana",
  "download_url": "https://www.attested.legal/api/motions/e2f1a3b4-c5d6-4e70-9182-a3b4c5d6e7f8/export?format=pdf",
  "generated_at": "2026-05-13T18:40:10Z"
}

Access: All paid tiers

generate_research_query

Converts plain English into a Boolean search query.

Parameters

description: string, required. The research question.

platform: string, required. One of "westlaw", "lexis", or "google_scholar".

Example response

{
  "query": "(premis! /s liabilit!) & landlord & (notice /5 defect!)",
  "platform": "westlaw",
  "explanation": "This query searches for premises liability cases involving landlords with notice of a defect."
}

Access: All paid tiers

verify_integrity

Recomputes a file’s SHA-256 hash and compares it to the stored value.

Parameters

asset_id: string, required. UUID of the evidence file.

Example response

{
  "verified": true,
  "original_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
  "computed_hash": "f143382b9c41f7a0d2b8e5c91a47b3e80c2d4f5a6b7c8d9e0f1a2b3c4d5e6f70",
  "file_name": "Lease_Agreement.pdf",
  "upload_date": "2026-05-13T17:07:41Z"
}

Access: All paid tiers

ai_review

Runs AI document review detecting document type, key facts, entities, and potential issues.

Parameters

asset_id: string, required. UUID of the evidence file.

Example response

{
  "review_id": "5a6b7c8d-9e0f-4a1b-bc2d-3e4f5a6b7c8d",
  "document_type": "medical_record",
  "summary": "Medical records summary for patient Sarah Chen documenting treatment at Apex Medical Group between March 2024 and January 2025.",
  "key_findings": [
    {
      "fact": "Treatment date range March 2024 to January 2025",
      "source": "document header"
    }
  ],
  "entities": {
    "people": ["Sarah Chen", "Dr. R. Tran"],
    "organizations": ["Apex Medical Group"],
    "dates": ["March 2024", "January 2025"]
  },
  "review_date": "2026-05-13T18:25:48Z"
}

Access: Professional (50/month), Enterprise (250/month)

get_case_summary

Returns aggregate case statistics.

Parameters

case_id: string, required. UUID of the case.

Example response

{
  "case_name": "Martinez v. Greenfield Properties LLC",
  "case_number": "2026-CV-03841",
  "court": "Eastern District of Louisiana",
  "jurisdiction": "federal",
  "total_files": 7,
  "timeline_events": 5,
  "duplicate_groups": 1,
  "reviews_completed": 0,
  "certificates_generated": 1,
  "created_at": "2026-03-20T15:00:00Z"
}

Access: All paid tiers

Errors

All tools return errors in a consistent format:

{
  "error": true,
  "message": "Human-readable description",
  "code": "ERROR_CODE"
}

Error codes

UNAUTHORIZED: Invalid or missing authentication.

NOT_FOUND: Case or evidence file not found.

FORBIDDEN: You do not have access to this resource.

TIER_RESTRICTED: Feature requires a higher subscription tier.

INVALID_INPUT: Missing or invalid parameters.

INTERNAL_ERROR: Unexpected server error.

Rate limits

The API is rate-limited to prevent abuse. Current limits are generous and sufficient for normal usage. If you receive a 429 response, wait a few seconds and retry.

Support

API questions: anthony@attested.legal
Security concerns: security@attested.legal

Back to Documentation Claude Integration