Hermes

Hermes is the read-only REST API over the Octiga tenant cache. It serves the directory, mail-flow and risk data Octiga already holds for every tenant of an MSP, in the shape of the Microsoft Graph and Exchange Online endpoints it came from, and passes a request through to Microsoft Graph live when the cache does not hold the answer.

Authenticate every /v1 call with Authorization: Bearer <token>, where the token is an API key (oct_<env>_…, issued by Octiga) or a Hermes OAuth 2.1 access token.

• OpenAPI document (/openapi.json)
• OAuth authorization server metadata
• OAuth protected resource metadata
• The API contract: hermes/api/SPEC.md in the Octiga monorepo