Me

The signed-in user — profile, devices, my submissions, appeals, deletion, rewards.

GET/v1/meДоступно

Current user

Хост: https://api.atasumaps.com · getMe
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается

Only what the map side stores — map reputation, trust level, locale. No phone, real name, wallet data or Atasuai sub. Staff consoles read the caller's role here: trust_level moderator / admin (the token carries no roles claim; two-factor sign-in is still proven by the token's amr / acr). A banned user gets 403. Like every /v1 user route it needs an API key (any scope) as well as the user token; staff consoles use a web key of their own.

Ответы

Статус	Описание	Тип
`200`	Profile	`Me`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`403`	Authenticated but not allowed (`scope_denied`, `key_restriction_failed`, `forbidden`, `user_banned`, `mfa_required`, `self_moderation_forbidden`, `feature_disabled`)	`Problem`
`429`	Rate limit (`rate_limited`) or monthly plan quota (`quota_exceeded`: `reject` plans only; `Retry-After` = seconds until the next Asia/Almaty month; `context` = `product`, `included`, `used`, `period_end`)	`Problem`

PATCH/v1/meЗапланировано

Update display name or locale

Хост: https://api.atasumaps.com · updateMe
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается
Idempotency-Key: Обязателен: один ключ на команду, повтор возвращает первый результат

Параметры

Имя	Где	Тип	Обязательно	Описание
`Idempotency-Key`	header	`string`	да	Client-generated unique key per logical command (UUID v4/v7 recommended). Scope: caller + endpoint + key. Same key + same body → first result (`Idempotent-Replayed: true`); same key + different body → `409 idempotency_key_reused`. Missing → `400 idempotency_key_required`. Keys are kept at least 24 hours.

Тело запроса `MeUpdate`

Имя	Тип	Обязательно	Описание
`display_name`	`string \| null`
`locale`	`Lang`
`expected_version`	`integer`

Ответы

Статус	Описание	Тип
`200`	Updated profile	`Me`
`400`	Invalid request (`invalid_request`, `idempotency_key_required`, `limit_exceeded`, `future_departure_not_supported`, `observation_in_future`)	`Problem`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`409`	Conflict — never a silent overwrite. Codes: `idempotency_key_reused` (same key, different body), `version_conflict` (stale `expected_version`; body has `current_version`), `invalid_state` (transition not allowed from the current status), `appeal_already_used`, `base_version_stale` (place changed since the edit's baseline; rebase first), `later_edits_exist` (revert needs compensation), `already_claimed`, `last_owner`, `already_member`, `deletion_pending`. A retry with the original `Idempotency-Key` still returns the original result, never a 409.	`Problem`

POST/v1/me/devicesЗапланировано

Register this device

Хост: https://api.atasumaps.com · registerDevice
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается
Idempotency-Key: Обязателен: один ключ на команду, повтор возвращает первый результат

Returns the device_id sent with event reports. Attestation (Play Integrity / App Attest) is optional in the MVP and only raises weight later. Push tokens are not accepted until push providers outside Kazakhstan are legally approved.

Параметры

Имя	Где	Тип	Обязательно	Описание
`Idempotency-Key`	header	`string`	да	Client-generated unique key per logical command (UUID v4/v7 recommended). Scope: caller + endpoint + key. Same key + same body → first result (`Idempotent-Replayed: true`); same key + different body → `409 idempotency_key_reused`. Missing → `400 idempotency_key_required`. Keys are kept at least 24 hours.

Тело запроса `DeviceRegister`

Имя	Тип	Обязательно	Описание
`platform`	`"android" \| "ios" \| "web"`	да
`app_version`	`string`
`attestation_token`	`string`		Play Integrity / App Attest token; verified server-side, not stored

Ответы

Статус	Описание	Тип
`201`	Device registered (or the same device returned on replay)	`Device`
`400`	Invalid request (`invalid_request`, `idempotency_key_required`, `limit_exceeded`, `future_departure_not_supported`, `observation_in_future`)	`Problem`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`409`	Conflict — never a silent overwrite. Codes: `idempotency_key_reused` (same key, different body), `version_conflict` (stale `expected_version`; body has `current_version`), `invalid_state` (transition not allowed from the current status), `appeal_already_used`, `base_version_stale` (place changed since the edit's baseline; rebase first), `later_edits_exist` (revert needs compensation), `already_claimed`, `last_owner`, `already_member`, `deletion_pending`. A retry with the original `Idempotency-Key` still returns the original result, never a 409.	`Problem`

GET/v1/me/submissionsДоступно

My submissions and reports with their status

Хост: https://api.atasumaps.com · listMySubmissions
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается

Параметры

Имя	Где	Тип	Описание
`kind`	query	`ReportKind[]`
`status`	query	`SubmissionDisplayStatus[]`
`lang`	query	`Lang`	Response language; overrides `Accept-Language`. Default `kk` (Cyrillic).
`cursor`	query	`string`	Opaque cursor from the previous page's `next_cursor`.
`limit`	query	`integer`

Ответы

Статус	Описание	Тип
`200`	Page of submissions, newest first	`MySubmissionPage`
`400`	Invalid request (`invalid_request`, `idempotency_key_required`, `limit_exceeded`, `future_departure_not_supported`, `observation_in_future`)	`Problem`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`429`	Rate limit (`rate_limited`) or monthly plan quota (`quota_exceeded`: `reject` plans only; `Retry-After` = seconds until the next Asia/Almaty month; `context` = `product`, `included`, `used`, `period_end`)	`Problem`

GET/v1/me/submissions/{report_id}Доступно

One of my submissions, with status history

Хост: https://api.atasumaps.com · getMySubmission
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается

Параметры

Имя	Где	Тип	Обязательно	Описание
`report_id`	path	`string (uuid)`	да
`lang`	query	`Lang`		Response language; overrides `Accept-Language`. Default `kk` (Cyrillic).

Ответы

Статус	Описание	Тип
`200`	Submission	`MySubmissionDetail`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`404`	No such resource, or not visible to the caller (`not_found`)	`Problem`
`429`	Rate limit (`rate_limited`) or monthly plan quota (`quota_exceeded`: `reject` plans only; `Retry-After` = seconds until the next Asia/Almaty month; `context` = `product`, `included`, `used`, `period_end`)	`Problem`

POST/v1/me/submissions/{report_id}/withdrawЗапланировано

Withdraw a pending submission

Хост: https://api.atasumaps.com · withdrawMySubmission
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается
Idempotency-Key: Обязателен: один ключ на команду, повтор возвращает первый результат

Параметры

Имя	Где	Тип	Обязательно	Описание
`report_id`	path	`string (uuid)`	да
`Idempotency-Key`	header	`string`	да	Client-generated unique key per logical command (UUID v4/v7 recommended). Scope: caller + endpoint + key. Same key + same body → first result (`Idempotent-Replayed: true`); same key + different body → `409 idempotency_key_reused`. Missing → `400 idempotency_key_required`. Keys are kept at least 24 hours.

Тело запроса `ExpectedVersionOnly`

Имя	Тип	Обязательно	Описание
`expected_version`	`integer`	да

Ответы

Статус	Описание	Тип
`200`	Withdrawn	`CommandResult`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`403`	Authenticated but not allowed (`scope_denied`, `key_restriction_failed`, `forbidden`, `user_banned`, `mfa_required`, `self_moderation_forbidden`, `feature_disabled`)	`Problem`
`404`	No such resource, or not visible to the caller (`not_found`)	`Problem`
`409`	Conflict — never a silent overwrite. Codes: `idempotency_key_reused` (same key, different body), `version_conflict` (stale `expected_version`; body has `current_version`), `invalid_state` (transition not allowed from the current status), `appeal_already_used`, `base_version_stale` (place changed since the edit's baseline; rebase first), `later_edits_exist` (revert needs compensation), `already_claimed`, `last_owner`, `already_member`, `deletion_pending`. A retry with the original `Idempotency-Key` still returns the original result, never a 409.	`Problem`

POST/v1/me/submissions/{report_id}/appealДоступно

Appeal a rejected submission (once)

Хост: https://api.atasumaps.com · appealMySubmission
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается
Idempotency-Key: Обязателен: один ключ на команду, повтор возвращает первый результат

rejected → pending_review, at most once per submission (409 appeal_already_used). Re-approval of a new place re-enables the original place; an edit is first rebased by a moderator. Someone else's submission → 404. Through this endpoint a moderator is an ordinary reporter (moderator re-opening only via the admin API).

Параметры

Имя	Где	Тип	Обязательно	Описание
`report_id`	path	`string (uuid)`	да
`Idempotency-Key`	header	`string`	да	Client-generated unique key per logical command (UUID v4/v7 recommended). Scope: caller + endpoint + key. Same key + same body → first result (`Idempotent-Replayed: true`); same key + different body → `409 idempotency_key_reused`. Missing → `400 idempotency_key_required`. Keys are kept at least 24 hours.

Тело запроса `AppealCreate`

Имя	Тип	Обязательно	Описание
`reason`	`string`	да
`expected_version`	`integer`	да

Ответы

Статус	Описание	Тип
`200`	Back in the review queue	`CommandResult`
`400`	Invalid request (`invalid_request`, `idempotency_key_required`, `limit_exceeded`, `future_departure_not_supported`, `observation_in_future`)	`Problem`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`403`	Authenticated but not allowed (`scope_denied`, `key_restriction_failed`, `forbidden`, `user_banned`, `mfa_required`, `self_moderation_forbidden`, `feature_disabled`)	`Problem`
`404`	No such resource, or not visible to the caller (`not_found`)	`Problem`
`409`	Conflict — never a silent overwrite. Codes: `idempotency_key_reused` (same key, different body), `version_conflict` (stale `expected_version`; body has `current_version`), `invalid_state` (transition not allowed from the current status), `appeal_already_used`, `base_version_stale` (place changed since the edit's baseline; rebase first), `later_edits_exist` (revert needs compensation), `already_claimed`, `last_owner`, `already_member`, `deletion_pending`. A retry with the original `Idempotency-Key` still returns the original result, never a 409.	`Problem`
`429`	Rate limit (`rate_limited`) or monthly plan quota (`quota_exceeded`: `reject` plans only; `Retry-After` = seconds until the next Asia/Almaty month; `context` = `product`, `included`, `used`, `period_end`)	`Problem`

POST/v1/me/submissions/{report_id}/mediaЗапланировано

Attach a photo to my submission

Хост: https://api.atasumaps.com · uploadSubmissionPhoto
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается
Idempotency-Key: Обязателен: один ключ на команду, повтор возвращает первый результат

Stored in object storage inside Kazakhstan. Size and type limited, content scanned, EXIF and location stripped before any publication; the original is kept separately and only moderators can see it, with every view logged. Max 10 MB, JPEG / PNG / HEIC, 5 photos per submission.

Параметры

Имя	Где	Тип	Обязательно	Описание
`report_id`	path	`string (uuid)`	да
`Idempotency-Key`	header	`string`	да	Client-generated unique key per logical command (UUID v4/v7 recommended). Scope: caller + endpoint + key. Same key + same body → first result (`Idempotent-Replayed: true`); same key + different body → `409 idempotency_key_reused`. Missing → `400 idempotency_key_required`. Keys are kept at least 24 hours.

Ответы

Статус	Описание	Тип
`201`	Stored	`MediaRef`
`400`	Invalid request (`invalid_request`, `idempotency_key_required`, `limit_exceeded`, `future_departure_not_supported`, `observation_in_future`)	`Problem`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`403`	Authenticated but not allowed (`scope_denied`, `key_restriction_failed`, `forbidden`, `user_banned`, `mfa_required`, `self_moderation_forbidden`, `feature_disabled`)	`Problem`
`404`	No such resource, or not visible to the caller (`not_found`)	`Problem`
`409`	Conflict — never a silent overwrite. Codes: `idempotency_key_reused` (same key, different body), `version_conflict` (stale `expected_version`; body has `current_version`), `invalid_state` (transition not allowed from the current status), `appeal_already_used`, `base_version_stale` (place changed since the edit's baseline; rebase first), `later_edits_exist` (revert needs compensation), `already_claimed`, `last_owner`, `already_member`, `deletion_pending`. A retry with the original `Idempotency-Key` still returns the original result, never a 409.	`Problem`
`413`	`payload_too_large`	`Problem`
`415`	`unsupported_media_type`	`Problem`

GET/v1/me/deletion-requestЗапланировано

Status of my deletion request

Хост: https://api.atasumaps.com · getDeletionRequest
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается

Ответы

Статус	Описание	Тип
`200`	Request	`DeletionRequest`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`404`	No such resource, or not visible to the caller (`not_found`)	`Problem`

POST/v1/me/deletion-requestЗапланировано

Request deletion of my data

Хост: https://api.atasumaps.com · requestDeletion
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается
Idempotency-Key: Обязателен: один ключ на команду, повтор возвращает первый результат

Covers the primary database, search index, photos and caches; backups expire by policy. Approved public contributions are kept but detached from the account (draft — see open questions). Replays return the existing request.

Параметры

Имя	Где	Тип	Обязательно	Описание
`Idempotency-Key`	header	`string`	да	Client-generated unique key per logical command (UUID v4/v7 recommended). Scope: caller + endpoint + key. Same key + same body → first result (`Idempotent-Replayed: true`); same key + different body → `409 idempotency_key_reused`. Missing → `400 idempotency_key_required`. Keys are kept at least 24 hours.

Тело запроса `DeletionRequestCreate`

Имя	Тип	Обязательно	Описание
`confirm`	`true`	да
`reason`	`string`

Ответы

Статус	Описание	Тип
`202`	Request recorded	`DeletionRequest`
`400`	Invalid request (`invalid_request`, `idempotency_key_required`, `limit_exceeded`, `future_departure_not_supported`, `observation_in_future`)	`Problem`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`409`	Conflict — never a silent overwrite. Codes: `idempotency_key_reused` (same key, different body), `version_conflict` (stale `expected_version`; body has `current_version`), `invalid_state` (transition not allowed from the current status), `appeal_already_used`, `base_version_stale` (place changed since the edit's baseline; rebase first), `later_edits_exist` (revert needs compensation), `already_claimed`, `last_owner`, `already_member`, `deletion_pending`. A retry with the original `Idempotency-Key` still returns the original result, never a 409.	`Problem`

GET/v1/me/rewardsЗапланировано

My jarmaq grant history (Beta; off until its tests pass)

Хост: https://api.atasumaps.com · listMyRewards
Доступ: Любой API-ключ + вошедший пользователь (Atasuai)
Учёт: Не учитывается

The Atasuai wallet is the ledger of record; this lists the map side's grant records only. Returns 403 feature_disabled until rewards are switched on.

Параметры

Имя	Где	Тип	Обязательно	Описание
`cursor`	query	`string`		Opaque cursor from the previous page's `next_cursor`.
`limit`	query	`integer`

Ответы

Статус	Описание	Тип
`200`	Grants, newest first	`RewardGrantPage`
`401`	Missing or invalid credentials (`unauthenticated`, `key_invalid`, `key_revoked`, `token_expired`, `token_invalid`)	`Problem`
`403`	Authenticated but not allowed (`scope_denied`, `key_restriction_failed`, `forbidden`, `user_banned`, `mfa_required`, `self_moderation_forbidden`, `feature_disabled`)	`Problem`

Me

Ответы

Параметры

Тело запроса MeUpdate

Ответы

Параметры

Тело запроса DeviceRegister

Ответы

Параметры

Ответы

Параметры

Ответы

Параметры

Тело запроса ExpectedVersionOnly

Ответы

Параметры

Тело запроса AppealCreate

Ответы

Параметры

Ответы

Ответы

Параметры

Тело запроса DeletionRequestCreate

Ответы

Параметры

Ответы

Тело запроса `MeUpdate`

Тело запроса `DeviceRegister`

Тело запроса `ExpectedVersionOnly`

Тело запроса `AppealCreate`

Тело запроса `DeletionRequestCreate`