Base URLs
- REST:
https://import.assistant.bd/api - MCP:
https://import.assistant.bd/mcp - Preview:
https://croex.lovable.app
Authentication
All authenticated calls use a Supabase-issued JWT bearer token, scoped to the caller's organization and role. MCP additionally supports OAuth 2.1 authorization-code with PKCE — see the well-known metadata at /.well-known/oauth-protected-resource.
Versioning
Backward-incompatible changes are shipped under a new date-versioned path (for example /api/2027-01). Non-breaking changes ship in place.
Resources
rfqs,quotations,purchase_ordersshipments,dispatch_orders,warehouse_receiptsinvoices,payments,bills,cash_transactionsletters_of_credit,compliance_documents,hs_codesactivity_logs(read-only, tamper-evident audit trail)
MCP tools
list-rfqs,list-invoices,list-dispatcheslist-shipments,log-activity
Rate limits
1,000 requests / minute per organization on REST; MCP tool calls are scoped per session.
Get credentials
Request API access
Email mail@sojibahmmed.com with your organization, environment (sandbox / production) and intended integration.