# API Reference

Query and export your Axiad Mesh data programmatically. This section documents
the customer-facing APIs and how to authenticate to them.

- **[Analytics OData API](./analytics-odata.mdx)** — a read-only, tenant-isolated
  interface you can point BI and analytics tools at (for example Power BI, via
  **Get Data → OData Feed**). Browse the entity sets and the OData options they
  support.
- **[Software CBOM Export](./cbom/mesh-global-software-cbom-export.info.mdx)** — fetch
  a CycloneDX Crypto Bill of Materials for a piece of software, to evaluate its
  post-quantum readiness before you adopt it. Interactive endpoint reference with
  request parameters, responses, and code samples.
- **[Authentication](./authentication.md)** — how to authenticate your API
  requests.

Both APIs use the same OAuth 2.0 authentication, and the OData API scopes every
response to your organization's data. The CBOM export reads from a shared,
public software catalog, so it returns the same result for every authenticated
caller.

## Machine-readable specs

The Software CBOM Export publishes its **OpenAPI 3.1 spec** at
[`/openapi/cbom-export.yaml`](/openapi/cbom-export.yaml) — point your API tooling
or AI agents at it directly. Every endpoint page in this section also has a
plain-Markdown twin (append `.md` to its URL), so agents can read the reference
without rendering the page.

For the dashboard-driven ways to get data out — CSV exports and FAIR reports —
see [Reports, exports, and data retrieval](../user-guide/reports-and-exports.md).