Leases

Authentication

Requires session cookie (web app) or API key (x-api-key header). All endpoints are tenant-scoped via entityId.

Endpoints

List leases

GET /api/leases?entityId={entityId}

Returns an array of leases for the entity.

[
  {
    "id": "lease_abc123",
    "lessor": "Vendor Inc",
    "assetDescription": "Office space",
    "termMonths": 60,
    "classification": "operating"
  }
]

Create lease

POST /api/leases

Body: { "entityId", "lessor", "assetDescription", "termMonths", "monthlyPayment", "classification": "operating" | "finance", ... }

Update / Delete

PUT /api/leases — body: { "entityId", "leaseId", ...fields }

DELETE /api/leases — body: { "entityId", "leaseId" }