MapleLMS Trust Center

Agency API access

Approved federal agencies can retrieve restricted certification data programmatically from the Trust Center API.

Public document · Last updated 2026-11-13 · Owner: security@maplelms.com

Getting access

  1. Submit an access request and sign in or create an account with your agency email.
  2. The MapleLMS security team reviews the request. You receive an email when it is approved or denied.
  3. Once approved, you can call the API with your sign-in token. Every call is logged.

API reference

Base URL
https://5w54mpjjd6.execute-api.us-east-1.amazonaws.com
Authentication
Send your sign-in ID token in the header Authorization: Bearer <id_token>. Tokens are issued by the Trust Center sign-in at auth.maple-trust-center.maplelms.com and expire, so sign in again when a call returns 401.
GET /me
Returns your access status (none, pending, approved or denied) and, once approved, the list of documents available to you.
GET /certification-data?doc=<file>
Returns one approved document. JSON documents are returned directly. Other files, such as PDFs, are returned as a short-lived download link (presignedUrl, valid for 60 seconds). Add &dl=1 to request a download rather than inline display.
POST /request
Records an access request (used by the request form). Most users should use the request page instead.
Errors
401 missing or expired token · 403 unverified email or access not approved · 400 invalid document name.

Example

With a valid ID token in the TOKEN variable:

curl -H "Authorization: Bearer $TOKEN" \
  https://5w54mpjjd6.execute-api.us-east-1.amazonaws.com/me

curl -H "Authorization: Bearer $TOKEN" \
  "https://5w54mpjjd6.execute-api.us-east-1.amazonaws.com/certification-data?doc=ksi-evidence-summary.json"
Getting a token. Tokens come from the browser sign-in on the agency portal. Fully automated (unattended) token issuance is not available yet. If your agency needs it, contact security@maplelms.com.