Start here
Public bundle
/api/public-bundle.json
Choose a path
What do you want to use safely?
Start with a public bundle, a source-health check, a search answer, or a protected export. Each path shows the route, the public limit, and the right next click.
Open civic data Protected access clear
How can I safely reuse Civic OS data?
Use these routes when you need public civic answers, source trails, assistant context, or shared summaries. Every route should show what it answers, where the evidence comes from, and what is intentionally not exposed.
Protected exports
Public access
/api/x402/manifest.json
Source fields
1477
with public use status
Reuse check
Before reusing this data, check four things
Check the envelope, care limits, cache age, and care status before reusing a summary.
Every response should state success, version, metadata, and data.
Useful responses keep source references and evidence routes attached.
Sensitive details do not appear in API, search, bundles, or exports.
Protected routes should explain access without leaking private data.
Reusable routes
What each route answers
| Endpoint | Format | Access | Purpose |
|---|---|---|---|
| /api/public-bundle.json | JSON | Public | Source and signal summary |
| /api/feed-status.json | JSON | Public | Dated source check status and receipt evidence |
| /api/source-summary.json | JSON | Public | Source receipt and care-label summary |
| /api/source-refresh/manifest.json | JSON | Public | Latest public source-check manifest |
| /api/search-index.json | JSON | Public | Search and assistant discovery |
| /api/search.json?q=housing | JSON | Public | Search public guide records |
| /api/entities/index.json | JSON | Public | Entity list |
| /api/issues/housing.json | JSON | Public | Issue summary |
| /api/sources/summary.json | JSON | Public | Public receipt overview |
| /api/sources/index.json | JSON | Public | Source list |
| /api/sources/src_d9659ce1ef2b.json | JSON | Public | Source detail summary |
| /api/sources/src_2bdd6d49b98d/runs.json | JSON | Public | Dated source-check list |
| /api/sources/src_2bdd6d49b98d/evidence/20260525T061753750Z.json | JSON | Public | Dated source receipt |
| /api/signals/issue_drift.json | JSON | Public | Signal explanation |
| /api/signals/outputs.json | JSON | Public | Public explanation records |
| /api/claims/index.json | JSON | Public | Claims guide summary |
| /api/claims/contradiction_radar.json | JSON | Public | Claims explanation detail |
| /api/money/index.json | JSON | Public | Money guide summary |
| /api/records/index.json | JSON | Public | Records guide summary |
| /api/archive/index.json | JSON | Public | Archive guide summary |
| /api/x402/manifest.json | JSON | Public discovery | Protected export access details |
| /sitemap-index.xml | XML | Public | Search engine discovery |
| /llms.txt | Text | Public | AI assistant summary |
Before reusing a public answer
Check the envelope, care limits, cache age, and care status before reusing a summary.
| Topic | Route or field | Behavior |
|---|---|---|
| Public explanation records | /api/signals/outputs.json | Returns public summaries, source references, source element IDs, public use status, care status, generated date, and evidence routes. |
| Protected export status | /api/exports/source-status | Returns access details when an export requires payment or is not configured; protected exports still exclude sensitive details. |
| Display limits | sourcePolicy | Responses state what can be shown publicly and confirm that sensitive details are excluded. |
| Feed status | /api/feed-status.json | Returns audited source status, collection method, run timestamp, HTTP status, and content receipt for every cataloged source. |
| Run evidence | /api/sources/src_2bdd6d49b98d/evidence/20260525T061753750Z.json | Returns public-facing acquisition metadata for one run, including timestamp, HTTP status, content length, and content receipt. |
| Source refresh manifest | /api/source-refresh/manifest.json | Returns public-ready source collection jobs without emitting lookup keys or source element details. |
| Freshness | Cache-Control | Public JSON uses a 300 second browser cache with stale revalidation. Protected export responses use a shorter private cache. |