Domain > canary.api.productive.pcvisit.de

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-12-10	13.32.241.18 (ClassC)
2026-02-23	18.172.170.50 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 48087Connection: keep-aliveDate: Mon, 23 Feb 2026 16:41:35 GMTLast-Modified: Tue, 17 Feb 2026 15:33:13 GMTETag: 40d9f26993d23bfdc4e5d5a2b10f1414x-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 e00edd9ee60059876e31b4df9cf86e02.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SEA73-P3X-Amz-Cf-Id: olY6Q842-N1_m_-s1BWBw22mxJlKCRRRMb6eECptfn8QcC3CaMsPdA

!doctype html>html langen>meta charsetutf-8>meta nameviewport contentwidthdevice-width,initial-scale1>title>pcvisit API Integration Manual/title>style>* { box-sizing: border-box; }body { margin: 2rem auto; max-width: 1200px; font: 16px/1.6 Roboto, system-ui, -apple-system, Segoe UI, Ubuntu, Cantarell, Noto Sans, Arial, Apple Color Emoji, Segoe UI Emoji;}h1, h2, h3, h4 { line-height: 1.25; margin-top: 2em;}h1 { font-size: 2rem; }h2 { font-size: 1.5rem; }h3 { font-size: 1.25rem; }p, ul, ol, blockquote, pre, table, img { margin: 1em 0; }code, pre { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, Liberation Mono, monospace; font-size: 0.95em; }pre { padding: .75rem; border: 1px solid #ccc; border-radius: 8px; overflow: auto; background-color: #222; color: #f8f8f2 }blockquote { border-left: 4px solid #888; padding-left: 1rem; color: #555; }table { border-collapse: collapse; width: 100%; }th, td { border: 1px solid #d0d0d0;padding: .5rem;text-align: left; }img, video, iframe { max-width: 100%; height: auto; }a { color: #f0aa00; text-decoration: none; }a:hover { text-decoration: underline; }/* Table of Contents Styles *//* TOC Container - Floating on the side */.markdown-toc {    position: fixed;    top: 2rem;    left: 2rem;    max-width: 300px;    max-height: calc(100vh - 4rem);    overflow-y: auto;    background: rgba(255, 255, 255, 0.95);    backdrop-filter: blur(10px);    border: 1px solid rgba(0, 0, 0, 0.1);    border-radius: 8px;    padding: 1rem 1.25rem;    box-shadow: 0 4px 12px rgba(0, 0, 0, 0.1);    font-size: 0.9rem;    line-height: 1.6;    z-index: 1000;    transition: max-height 0.4s cubic-bezier(0.4, 0, 0.2, 1), opacity 0.3s ease;    opacity: 1;}/* Collapsed state */.markdown-toc.collapsed {    max-height: 0;    opacity: 0.7;    pointer-events: auto;    overflow: hidden;    box-shadow: none;    border-color: transparent;    padding-bottom: 2rem}.markdown-toc.collapsed .toc-content {    display: none;}.markdown-toc.collapsed .toc-toggle {    right: 0.25rem;}@media (prefers-color-scheme: dark) {    .markdown-toc {        background: rgba(20, 20, 20, 0.95);        border-color: rgba(255, 255, 255, 0.1);    }}/* Hide TOC on small screens */@media (max-width: 1200px) {    .markdown-toc {        display: none;    }}/* TOC Toggle Button */.toc-toggle {    position: absolute;    top: 0.5rem;    left: 0.5rem;    background: rgba(0, 0, 0, 0.05);    border: 1px solid rgba(0, 0, 0, 0.1);    border-radius: 4px;    width: 2rem;    height: 2rem;    display: flex;    align-items: center;    justify-content: center;    cursor: pointer;    font-size: 1.2rem;    line-height: 1;    transition: background 0.2s ease;    z-index: 10;}.toc-toggle:hover {    background: rgba(0, 0, 0, 0.1);}@media (prefers-color-scheme: dark) {    .toc-toggle {        background: rgba(255, 255, 255, 0.1);        border-color: rgba(255, 255, 255, 0.2);    }    .toc-toggle:hover {        background: rgba(255, 255, 255, 0.2);    }}.toc-toggle::before {    display: block;    content: ×;}.markdown-toc.collapsed .toc-toggle::before {    content: \2630;    font-size: 1.5rem;}/* TOC Title */.markdown-toc .toc-title {    display: block;    font-weight: 600;    font-size: 0.85rem;    text-transform: uppercase;    letter-spacing: 0.05em;    color: #666;    margin-bottom: 0.75rem;    padding-bottom: 0.5rem;    padding-left: 2.5rem;    border-bottom: 1px solid rgba(0, 0, 0, 0.1);}@media (prefers-color-scheme: dark) {    .markdown-toc .toc-title {        color: #aaa;        border-bottom-color: rgba(255, 255, 255, 0.1);    }}@media (prefers-color-scheme: dark) {    .markdown-toc::before {        color: #aaa;        border-bottom-color: rgba(255, 255, 255, 0.1);    }}/* TOC Content wrapper */.markdown-toc .toc-content {    display: block;}/* TOC List */.markdown-toc ul {    list-style: none;    padding: 0;    margin: 0;}/* Nested lists */.markdown-toc ul ul {    padding-left: 1rem;    margin-top: 0.25rem;}/* TOC Links */.markdown-toc a {    display: block;    color: #333;    text-decoration: none;    padding: 0.25rem 0;    transition: color 0.2s ease;    word-wrap: break-word;}.markdown-toc a:hover {    color: #f0aa00;    text-decoration: none;}@media (prefers-color-scheme: dark) {    .markdown-toc a {        color: #ddd;    }    .markdown-toc a:hover {        color: #f0aa00;    }}/* Active TOC item (when scrolling) */.markdown-toc a.active {    color: #f0aa00;    font-weight: 600;    background-color: rgba(240, 170, 0, 0.15);    border-left: 3px solid #f0aa00;    padding-left: calc(0.5rem - 3px);    margin-left: calc(-1 * (0.5rem - 3px));    border-radius: 4px;}@media (prefers-color-scheme: dark) {    .markdown-toc a.active {        color: #f0aa00;        background-color: rgba(74, 158, 255, 0.15);        border-left-color: #f0aa00;    }}/* Adjust main content to make room for TOC */.markdown-body {    margin-left: 0.5rem;    margin-right: 0.5rem;}@media (min-width: 1200px) {    .markdown-body {        margin-left: 340px;    }}/* Smooth scroll behavior */html {    scroll-behavior: smooth;}/* Anchor targets - add padding to account for fixed headers */.markdown-body h1id,.markdown-body h2id,.markdown-body h3id,.markdown-body h4id,.markdown-body h5id,.markdown-body h6id {    scroll-margin-top: 2rem;}a.header-anchor {    display: none;}/style>body>main classmarkdown-body>h1>Developer Manual for API Integrators/h1>nav classmarkdown-toc>ul>li>a href#overview>Overview /a>/li>li>a href#getting-started-with-graphql>Getting Started with GraphQL /a>/li>li>a href#authentication>Authentication /a>ul>li>a href#api-token-sources>API Token Sources /a>ul>li>a href#integrator-api-token>Integrator API Token /a>/li>li>a href#user-api-token>User API Token /a>/li>/ul>/li>li>a href#how-to-query-for-a-jwt>How to Query for a JWT /a>/li>li>a href#how-to-use-authentication-tokens>How to Use Authentication Tokens /a>ul>li>a href#rest%2Fhttp-authentication>REST/HTTP Authentication /a>ul>/ul>/li>li>a href#websocket-authentication>WebSocket Authentication /a>ul>/ul>/li>li>a href#token-information>Token Information /a>/li>li>a href#debugging-a-received-jwt-(jwt.io)>Debugging a received JWT (jwt.io) /a>/li>/ul>/li>/ul>/li>li>a href#error-handling>Error Handling /a>ul>li>a href#principles>Principles /a>/li>li>a href#troubleshooting-authentication-and-authorization-errors>Troubleshooting authentication and authorization errors /a>/li>/ul>/li>li>a href#functionality>Functionality /a>ul>li>a href#how-to-get-work-history>How to Get Work History /a>ul>li>a href#cursor-based-pagination>Cursor-Based Pagination /a>/li>/ul>/li>/ul>/li>/ul>/nav>h2 idoverview tabindex-1>Overview a classheader-anchor href#overview aria-hiddentrue>🔗/a>/h2>p>This API provides a GraphQL-based interface for integrators to interact with the system. The API supports authentication via JWT tokens and provides access to various resources including work history, company data, and session information./p>p>The API is accessible via a GraphQL endpoint, allowing integrators to query and mutate data according to their configured permissions./p>p>strong>API Endpoint:/strong> code>/graphql/code>/p>p>For detailed API reference documentation, see: a href../reference/index.html>API Reference/a>/p>h2 idgetting-started-with-graphql tabindex-1>Getting Started with GraphQL a classheader-anchor href#getting-started-with-graphql aria-hiddentrue>🔗/a>/h2>p>If you’re new to GraphQL, here are some helpful resources:/p>ul>li>p>a hrefhttps://graphql.org/learn/>Introduction to GraphQL/a> - Official GraphQL documentation/p>/li>li>p>a hrefhttps://www.howtographql.com/>How to GraphQL/a> - Free tutorial for all skill levels/p>/li>li>p>a hrefhttps://www.apollographql.com/docs/apollo-server/testing/graphql-playground/>GraphQL Playground/a> - Interactive GraphQL IDE for testing queries/p>/li>/ul>p>GraphQL is a query language that allows you to request exactly the data you need. Unlike REST APIs, you can fetch multiple resources in a single request and avoid over-fetching data. This makes it ideal for building efficient prototypes and production applications./p>h2 idauthentication tabindex-1>Authentication a classheader-anchor href#authentication aria-hiddentrue>🔗/a>/h2>h3 idapi-token-sources tabindex-1>API Token Sources a classheader-anchor href#api-token-sources aria-hiddentrue>🔗/a>/h3>p>Before you can authenticate with the API, you need to understand where the required tokens come from:/p>h4 idintegrator-api-token tabindex-1>Integrator API Token a classheader-anchor href#integrator-api-token aria-hiddentrue>🔗/a>/h4>p>The strong>integrator API token/strong> is provided by PCVisit directly in a secure manner. This token identifies your integration and grants access to the API on behalf of your organization./p>ul>li>The integrator token is issued by PCVisit during the integration setup process/li>li>It should be stored securely and never exposed in client-side code or public repositories/li>li>This token is used to authenticate your integration’s requests to the API/li>/ul>h4 iduser-api-token tabindex-1>User API Token a classheader-anchor href#user-api-token aria-hiddentrue>🔗/a>/h4>p>The strong>user API token/strong> is created by the end user themselves using the PCVisit web application. This token represents the user’s consent to allow your integration to access their data./p>ul>li>Users generate this token through their account settings in the PCVisit webapp/li>li>Each user has their own unique user API token/li>li>The token links your integration to a specific user’s account and permissions/li>li>Users can revoke or regenerate their user API token at any time through the webapp/li>/ul>p>strong>Important:/strong> Both tokens are required to obtain a JWT token. The integrator token authenticates your integration, while the user token ensures you’re acting on behalf of a specific user with their explicit consent./p>h3 idhow-to-query-for-a-jwt tabindex-1>How to Query for a JWT a classheader-anchor href#how-to-query-for-a-jwt aria-hiddentrue>🔗/a>/h3>p>To authenticate with the API, integrators must first obtain a JWT token using their API tokens. This is done through the a href../reference/index.html#query-SiRetrieveSignedJwt>code>SiRetrieveSignedJwt/code>/a> GraphQL query./p>p>strong>GraphQL Query:/strong>/p>pre>code classlanguage-graphql>query GetJWT($userApiToken: UserApiToken!, $integratorApiToken: IntegratorApiToken!) {  SiRetrieveSignedJwt(    userApiToken: $userApiToken    integratorApiToken: $integratorApiToken  ) {    ... on SignedJwtWasRetrieved {      token      customerUuid    }    ... on Failure {      error      comment_for_dev      comment_for_user    }  }}/code>/pre>p>strong>cURL Example (with API token authentication):/strong>/p>pre>code classlanguage-bash>curl -X POST https://api.example.com/graphql \  -H "Content-Type: application/json" \  -H "x-api-key: your-integrator-api-token" \  -d {    "query": "query GetJWT($userApiToken: UserApiToken!, $integratorApiToken: IntegratorApiToken!) { SiRetrieveSignedJwt(userApiToken: $userApiToken, integratorApiToken: $integratorApiToken) { ... on SignedJwtWasRetrieved { token customerUuid } ... on Failure { error comment_for_dev comment_for_user } } }",    "variables": {      "userApiToken": "your-user-api-token",      "integratorApiToken": "your-integrator-api-token"    }  }/code>/pre>p>strong>Note:/strong> The a href../reference/index.html#query-SiRetrieveSignedJwt>code>SiRetrieveSignedJwt/code>/a> query itself requires authentication. You can authenticate using your API tokens via the code>x-api-key/code> header, or if you already have a JWT token, you can use the code>Authorization: Bearer/code> header./p>p>strong>Alternative cURL Example (with existing JWT token):/strong>/p>pre>code classlanguage-bash>curl -X POST https://api.example.com/graphql \  -H "Content-Type: application/json" \  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..." \  -d {    "query": "query GetJWT($userApiToken: UserApiToken!, $integratorApiToken: IntegratorApiToken!) { SiRetrieveSignedJwt(userApiToken: $userApiToken, integratorApiToken: $integratorApiToken) { ... on SignedJwtWasRetrieved { token customerUuid } ... on Failure { error comment_for_dev comment_for_user } } }",    "variables": {      "userApiToken": "your-user-api-token",      "integratorApiToken": "your-integrator-api-token"    }  }/code>/pre>p>strong>Response:/strong>/p>pre>code classlanguage-json>{  "data": {    "SiRetrieveSignedJwt": {      "token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",      "customerUuid": "customer-uuid-here"    }  }}/code>/pre>p>For detailed authentication reference, see: a href../reference/index.html#query-SiRetrieveSignedJwt>Authentication Reference/a>/p>h3 idhow-to-use-authentication-tokens tabindex-1>How to Use Authentication Tokens a classheader-anchor href#how-to-use-authentication-tokens aria-hiddentrue>🔗/a>/h3>p>The API supports two authentication methods:/p>ol>li>strong>JWT Tokens/strong> - Obtained via the a href../reference/index.html#query-SiRetrieveSignedJwt>code>SiRetrieveSignedJwt/code>/a> query/li>li>strong>API Tokens/strong> - User API token and integrator API token (used to obtain JWT tokens)/li>/ol>p>Both methods can be used with REST/HTTP requests and WebSocket connections./p>h4 idrest%2Fhttp-authentication tabindex-1>REST/HTTP Authentication a classheader-anchor href#rest%2Fhttp-authentication aria-hiddentrue>🔗/a>/h4>h5>Using JWT Tokens/h5>p>For REST/HTTP requests, include the JWT token in the code>Authorization/code> header with the code>Bearer/code> prefix:/p>p>strong>Header Format:/strong>/p>pre>code>Authorization: Bearer <your-jwt-token>/code>/pre>p>strong>cURL Example:/strong>/p>pre>code classlanguage-bash>curl -X POST https://api.example.com/graphql \  -H "Content-Type: application/json" \  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..." \  -d {    "query": "query { ... }"  }/code>/pre>p>strong>JavaScript Example:/strong>/p>pre>code classlanguage-javascript>fetch(https://api.example.com/graphql, {  method: POST,  headers: {    Content-Type: application/json,    Authorization: `Bearer ${jwtToken}`  },  body: JSON.stringify({    query: query { ... }  })});/code>/pre>h5>Using API Tokens/h5>p>For REST/HTTP requests, include the API token in the code>x-api-key/code> header:/p>p>strong>Header Format:/strong>/p>pre>code>x-api-key: <your-api-token>/code>/pre>p>strong>Note:/strong> API tokens can also be passed as query parameters, but using the header is recommended for security./p>p>strong>cURL Example:/strong>/p>pre>code classlanguage-bash>curl -X POST https://api.example.com/graphql \  -H "Content-Type: application/json" \  -H "x-api-key: your-api-token" \  -d {    "query": "query { ... }"  }/code>/pre>p>strong>JavaScript Example:/strong>/p>pre>code classlanguage-javascript>fetch(https://api.example.com/graphql, {  method: POST,  headers: {    Content-Type: application/json,    x-api-key: apiToken  },  body: JSON.stringify({    query: query { ... }  })});/code>/pre>h4 idwebsocket-authentication tabindex-1>WebSocket Authentication a classheader-anchor href#websocket-authentication aria-hiddentrue>🔗/a>/h4>p>For WebSocket connections (GraphQL subscriptions), authentication is provided via connection parameters during the initial handshake./p>h5>Using JWT Tokens with WebSocket/h5>p>When establishing a WebSocket connection, include the JWT token in the code>connectionParams/code> with the code>Bearer/code> prefix:/p>p>strong>Connection Parameters:/strong>/p>pre>code classlanguage-javascript>{  authToken: "Bearer <your-jwt-token>"}/code>/pre>p>strong>JavaScript Example (Apollo Client):/strong>/p>pre>code classlanguage-javascript>import { SubscriptionClient } from subscriptions-transport-ws;const client  new SubscriptionClient(wss://api.example.com/graphql, {  reconnect: true,  connectionParams: () > ({    authToken: `Bearer ${jwtToken}`  })});/code>/pre>p>strong>Python Example:/strong>/p>pre>code classlanguage-python>from gql import Client, gqlfrom gql.transport.websockets import WebsocketsTransporttransport  WebsocketsTransport(    urlwss://api.example.com/graphql,    init_payload{authToken: fBearer {jwt_token}})client  Client(transporttransport, fetch_schema_from_transportTrue)/code>/pre>h5>Using API Tokens with WebSocket/h5>p>When establishing a WebSocket connection, include the API token in the code>connectionParams/code> strong>without/strong> the code>Bearer/code> prefix:/p>p>strong>Connection Parameters:/strong>/p>pre>code classlanguage-javascript>{  authToken: "<your-api-token>"}/code>/pre>p>strong>JavaScript Example (Apollo Client):/strong>/p>pre>code classlanguage-javascript>import { SubscriptionClient } from subscriptions-transport-ws;const client  new SubscriptionClient(wss://api.example.com/graphql, {  reconnect: true,  connectionParams: () > ({    authToken: apiToken  // No "Bearer" prefix for API tokens  })});/code>/pre>p>strong>Python Example:/strong>/p>pre>code classlanguage-python>from gql import Client, gqlfrom gql.transport.websockets import WebsocketsTransporttransport  WebsocketsTransport(    urlwss://api.example.com/graphql,    init_payload{authToken: api_token}  # No "Bearer" prefix)client  Client(transporttransport, fetch_schema_from_transportTrue)/code>/pre>h4 idtoken-information tabindex-1>Token Information a classheader-anchor href#token-information aria-hiddentrue>🔗/a>/h4>p>strong>JWT Token Claims:/strong>The JWT token contains claims that define:/p>ul>li>The integrator identity/li>li>Allowed API paths/li>li>User permissions/li>li>Token expiration time/li>/ul>p>strong>Important Notes:/strong>/p>ul>li>JWT tokens have a limited lifetime. You should implement token refresh logic to obtain new tokens before expiration./li>li>For JWT tokens, always use the code>Bearer/code> prefix in both REST and WebSocket connections./li>li>For API tokens, use the code>x-api-key/code> header in REST requests, or pass directly as code>authToken/code> (without code>Bearer/code>) in WebSocket connection parameters./li>li>The API will automatically detect whether you’re using a JWT token (starts with code>Bearer/code>) or an API token based on the format./li>/ul>h4 iddebugging-a-received-jwt-(jwt.io) tabindex-1>Debugging a received JWT (a hrefhttp://jwt.io>jwt.io/a>) a classheader-anchor href#debugging-a-received-jwt-(jwt.io) aria-hiddentrue>🔗/a>/h4>p>When you run into code>AccessDenied/code> / code>TokenExpired/code> and want to inspect what your integration is actually sending, you can decode the JWT on the website a hrefhttps://jwt.io/>jwt.io/a>./p>p>strong>Important security note:/strong> A JWT is a em>bearer credential/em> (whoever has it can use it). Treat it like a password./p>ul>li>Do strong>not/strong> paste real production JWTs into third-party websites./li>li>Prefer using a short-lived token from a test account / test environment./li>li>Never share your JWT in tickets, screenshots, chat, or logs. If you must log it, redact it (e.g. keep only the first/last 6 chars)./li>/ul>p>strong>How to decode it on a hrefhttp://jwt.io>jwt.io/a>:/strong>/p>ol>li>Copy the token value (only the code>eyJ.../code> part). If you have code>Authorization: Bearer <token>/code>, remove the code>Bearer /code> prefix./li>li>Open a hrefhttps://jwt.io/>jwt.io/a> and paste the JWT into the “Encoded” field./li>li>Inspect the decoded parts:ul>li>strong>Header/strong>: check code>alg/code> (algorithm), code>typ/code>, and optionally code>kid/code> (key id)./li>li>strong>Payload/strong>: check code>exp/code> (expiration), code>iat/code> (issued at), and any identity/permission claims used by the API./li>/ul>/li>li>Validate the time-based claims:ul>li>If code>exp/code> is in the past, request a new JWT via code>SiRetrieveSignedJwt/code> and retry./li>li>If code>nbf/code> is in the future, verify your system clock (clock skew can break auth)./li>/ul>/li>/ol>p>strong>Signature verification on a hrefhttp://jwt.io>jwt.io/a> (optional):/strong>/p>ul>li>a hrefhttp://jwt.io>jwt.io/a> can verify the signature only if you provide the correct public key for the signing key (code>kid/code>)./li>li>Never paste a private key. In most cases, decoding the header/payload is enough to debug integration issues./li>/ul>h2 iderror-handling tabindex-1>Error Handling a classheader-anchor href#error-handling aria-hiddentrue>🔗/a>/h2>h3 idprinciples tabindex-1>Principles a classheader-anchor href#principles aria-hiddentrue>🔗/a>/h3>p>The API uses a consistent error response format across all operations. All errors are returned as part of the GraphQL response using the code>Failure/code> type./p>p>strong>Error Response Structure:/strong>/p>pre>code classlanguage-json>{  "data": {    "YourQuery": {      "error": "ErrorIDs.AccessDenied",      "comment_for_dev": "Detailed error message for developers",      "comment_for_user": "User-friendly error message"    }  }}/code>/pre>p>strong>Common Error Scenarios:/strong>/p>ol>li>p>strong>Authentication Errors:/strong>/p>ul>li>code>AccessDenied/code>: Invalid or missing JWT token/li>li>code>TokenExpired/code>: JWT token has expired/li>li>code>InvalidValue/code>: Invalid API tokens provided/li>/ul>/li>li>p>strong>Authorization Errors:/strong>/p>ul>li>code>InsufficientRights/code>: User lacks required permissions/li>li>code>AccessDenied/code>: Access denied to the requested resource/li>/ul>/li>li>p>strong>Validation Errors:/strong>/p>ul>li>code>InvalidValue/code>: Invalid input parameters/li>li>code>MissingValue/code>: Required parameters are missing/li>li>code>DoesNotExist/code>: Requested resource does not exist/li>/ul>/li>li>p>strong>Server Errors:/strong>/p>ul>li>code>ApplicationFailure/code>: Internal application error/li>li>code>BackendFailure/code>: Backend service error/li>/ul>/li>li>p>strong>Rate Limiting Errors:/strong>/p>ul>li>code>TryAgainLater/code>: Rate limit exceeded (for integrator API calls)ul>li>The code>comment_for_dev/code> field contains HTTP-style code>Retry-After/code> information/li>li>Format: code>Retry-After: <seconds> seconds (until <UTC date>)/code>/li>li>Example: code>Retry-After: 5 seconds (until Mon, 01 Jan 2024 12:00:00 GMT)/code>/li>li>The code>comment_for_dev/code> also includes the configured rate limit (e.g., “Rate limit: 100 requests per minute”)/li>li>strong>Important:/strong> When receiving a code>TryAgainLater/code> error due to rate limiting, wait for the specified duration before retrying the request/li>/ul>/li>/ul>/li>/ol>p>strong>Error Handling Best Practices:/strong>/p>ol>li>Always check for the code>Failure/code> type in union responses/li>li>Log the code>comment_for_dev/code> for debugging purposes/li>li>Display code>comment_for_user/code> to end users/li>li>Implement retry logic for transient errors:ul>li>For code>TryAgainLater/code> errors due to rate limiting, parse the code>Retry-After/code> value from code>comment_for_dev/code> and wait before retrying/li>li>Extract the retry delay (in seconds) from the code>Retry-After/code> header format/li>li>Use exponential backoff for other transient errors/li>/ul>/li>li>Handle token expiration by refreshing the JWT/li>li>strong>Rate Limiting:/strong> Integrators are subject to per-integrator rate limits configured in the system. When a rate limit is exceeded, the API returns a code>TryAgainLater/code> error with retry information in the code>comment_for_dev/code> field. Always respect the code>Retry-After/code> timing to avoid further rate limit violations./li>/ol>h3 idtroubleshooting-authentication-and-authorization-errors tabindex-1>Troubleshooting authentication and authorization errors a classheader-anchor href#troubleshooting-authentication-and-authorization-errors aria-hiddentrue>🔗/a>/h3>p>Use this checklist when you receive authentication/authorization errors./p>p>strong>If you receive code>ErrorIDs.AccessDenied/code>:/strong>/p>ul>li>Ensure you are sending strong>exactly one/strong> of the supported authentication formats:ul>li>JWT: code>Authorization: Bearer <jwt>/code> (note the code>Bearer /code> prefix)/li>li>API token (only for endpoints that accept it): code>x-api-key: <api-token>/code> (no code>Bearer/code>)/li>/ul>/li>li>Ensure you are not accidentally sending an API token em>as/em> a Bearer token./li>li>Decode the JWT on a hrefhttps://jwt.io/>jwt.io/a> and check code>exp/code>/code>nbf/code> (see the section above)./li>/ul>p>strong>If you receive code>ErrorIDs.TokenExpired/code>:/strong>/p>ul>li>Request a new JWT via code>SiRetrieveSignedJwt/code> and retry the original request./li>li>If you see frequent expiry failures, refresh the JWT a bit before code>exp/code> (and make sure your server clock is correct)./li>/ul>p>strong>If you receive code>ErrorIDs.InsufficientRights/code>:/strong>/p>ul>li>The JWT is valid, but the user/token does not have the required permission(s) for the queried resource./li>li>Verify you are using the correct user’s API token (end-user consent) and that the user account has the expected rights in PCVisit./li>/ul>p>For detailed error reference, see: a href../reference/index.html#definition-ErrorIDs>Error Reference/a>/p>h2 idfunctionality tabindex-1>Functionality a classheader-anchor href#functionality aria-hiddentrue>🔗/a>/h2>h3 idhow-to-get-work-history tabindex-1>How to Get Work History a classheader-anchor href#how-to-get-work-history aria-hiddentrue>🔗/a>/h3>p>The work history (session history) can be retrieved using the a href../reference/index.html#query-AcQuerySessionsHistory>code>AcQuerySessionsHistory/code>/a> GraphQL query. This query returns a paginated list of session protocols for a given company./p>p>strong>GraphQL Query:/strong>/p>pre>code classlanguage-graphql>query GetWorkHistory(  $company: CustomerUuid!  $timeFrame: TimeFrame  $filter: Filter  $sort: Sort!  $search: Search  $pagination: Pagination) {  AcQuerySessionsHistory(    company: $company    timeFrame: $timeFrame    filter: $filter    sort: $sort    search: $search    pagination: $pagination  ) {    ... on SessionProtocolEdge {      nodes {        cursor        value {          id          name          sessionCreatedAt          sessionFinishedAt          sessionCompanyUuid          state          type          duration          customDuration          invoiceState          participants {            supporterIdentity {              id            }            supporterContact {              email            }            isSessionCreator          }          target {            computerId            computerDisplayName          }          clientCompany {            clientId            clientName          }        }      }      totalCount      batchLoadingIsStillActive      reportingActiveSince    }    ... on Failure {      error      comment_for_dev      comment_for_user    }  }}/code>/pre>p>strong>Important Schema Notes:/strong>/p>p>The code>AcQuerySessionsHistory/code> query returns a code>SessionProtocolEdge/code> which contains a code>nodes/code> array. Each node is of type code>SessionProtocolNode/code>, which wraps the actual session data in a code>value/code> field:/p>ul>li>strong>Structure/strong>: code>SessionProtocolEdge/code> → code>nodes: SessionProtocolNode/code> → code>value: SessionProtocol/code>/li>li>strong>Access Pattern/strong>: You must access session fields through code>nodes { value { ... } }/code> - you cannot query fields directly on the node/li>li>strong>Common code>SessionProtocol/code> fields/strong>:ul>li>code>id: TaskUuid/code> - Unique session identifier/li>li>code>name: SessionName/code> - Session name/description/li>li>code>sessionCreatedAt: UnixTimeMs/code> - When the session was created (Unix timestamp in milliseconds)/li>li>code>sessionFinishedAt: UnixTimeMs/code> - When the session finished (null if still active)/li>li>code>sessionCompanyUuid: CustomerUuid/code> - Company UUID associated with the session/li>li>code>state: SessionState/code> - Current state of the session (e.g., “Open”, “Closed”)/li>li>code>type: SessionType/code> - Type of session (e.g., “Adhoc”, “RemoteHost”)/li>li>code>duration: DurationMs/code> - Calculated duration in milliseconds/li>li>code>customDuration: DurationMs/code> - Custom duration override if set/li>li>code>invoiceState: TaskInvoiceStatus/code> - Invoice status/li>li>code>participants: SessionProtocolParticipant/code> - Array of session participants/li>li>code>target: SessionProtocolMainTarget/code> - Target computer/asset information/li>li>code>clientCompany: ClientCompany/code> - Client company information if applicable/li>/ul>/li>/ul>p>strong>cURL Example:/strong>/p>pre>code classlanguage-bash>curl -X POST https://api.example.com/graphql \  -H "Content-Type: application/json" \  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..." \  -d {    "query": "query GetWorkHistory($company: CustomerUuid!, $timeFrame: TimeFrame, $pagination: Pagination) { AcQuerySessionsHistory(company: $company, timeFrame: $timeFrame, pagination: $pagination) { ... on SessionProtocolEdge { nodes { value { id name sessionCreatedAt sessionFinishedAt sessionCompanyUuid state } } totalCount batchLoadingIsStillActive reportingActiveSince } ... on Failure { error comment_for_dev comment_for_user } } }",    "variables": {      "company": "12345678-1234-1234-1234-123456789012",      "timeFrame": {        "startDate": 1609459200000,        "endDate": 1640995200000      },      "pagination": {        "offset": 0,        "lengthStartingFromOffset": 10      }    }  }/code>/pre>p>strong>Note:/strong> The code>Pagination/code> type requires code>lengthStartingFromOffset/code> (required) and optionally accepts code>offset/code> and code>cursor/code>. The code>first/code> and code>after/code> fields are not part of this API’s pagination schema./p>p>strong>Response:/strong>/p>pre>code classlanguage-json>{  "data": {    "AcQuerySessionsHistory": {      "nodes":         {          "cursor": "cursor_abc123",          "value": {            "id": "session-uuid-1",            "name": "Support Session",            "sessionCreatedAt": 1609459200000,            "sessionFinishedAt": 1609462800000,            "sessionCompanyUuid": "12345678-1234-1234-1234-123456789012",            "state": "Closed",            "type": "Adhoc",            "duration": 3600000,            "customDuration": null,            "invoiceState": "Invoiced"          }        }      ,      "totalCount": 100,      "batchLoadingIsStillActive": false,      "reportingActiveSince": 1609459200000    }  }}/code>/pre>p>strong>Error Response Example:/strong>/p>pre>code classlanguage-json>{  "data": {    "AcQuerySessionsHistory": {      "error": "AccessDenied",      "comment_for_dev": "no matching allowed relationships found",      "comment_for_user": "Sie haben nicht die nötige Berechtigung, um diese Funktion zu nutzen!"    }  }}/code>/pre>p>strong>Query Parameters:/strong>/p>ul>li>code>company/code> (required): The customer UUID of the company (type: a href../reference/index.html#definition-CustomerUuid>code>CustomerUuid/code>/a>)/li>li>code>timeFrame/code> (optional): Filter sessions by time range (type: a href../reference/index.html#definition-TimeFrame>code>TimeFrame/code>/a>)ul>li>code>startDate/code>: Unix timestamp in milliseconds (inclusive)/li>li>code>endDate/code>: Unix timestamp in milliseconds (inclusive)/li>li>strong>Note/strong>: Both timestamps must be in milliseconds since Unix epoch (January 1, 1970). For example, to query the last 7 days: calculate code>endDate/code> as current time in milliseconds, and code>startDate/code> as current time minus 7 days in milliseconds./li>/ul>/li>li>code>filter/code> (optional): Additional filtering criteria (type: a href../reference/index.html#definition-Filter>code>Filter/code>/a>)/li>li>code>sort/code> (optional): Array of sort criteria (type: a href../reference/index.html#definition-Sort>code>Sort/code>/a>)/li>li>code>search/code> (optional): Text search parameters (type: a href../reference/index.html#definition-Search>code>Search/code>/a>)/li>li>code>pagination/code> (optional): Pagination parameters (type: a href../reference/index.html#definition-Pagination>code>Pagination/code>/a>)ul>li>code>lengthStartingFromOffset/code> (required): Number of items to retrieve starting from the offset/li>li>code>offset/code> (optional): Starting position for pagination (defaults to 0 if not provided)/li>li>code>cursor/code> (optional): Cursor for pagination (alternative to offset)/li>/ul>/li>/ul>h4 idcursor-based-pagination tabindex-1>Cursor-Based Pagination a classheader-anchor href#cursor-based-pagination aria-hiddentrue>🔗/a>/h4>p>The API supports cursor-based pagination, which is more efficient and reliable than offset-based pagination, especially for large datasets. Cursor pagination uses an opaque string (cursor) that represents a specific position in the sorted dataset./p>p>strong>How Cursor Pagination Works:/strong>/p>ol>li>strong>Initial Request/strong>: Make your first request without a cursor (or with code>offset: 0/code>)/li>li>strong>Extract Cursor/strong>: Each node in the response contains a code>cursor/code> field - use the cursor from the last node of the current page/li>li>strong>Next Page/strong>: Use that cursor in the code>pagination.cursor/code> field for the next request/li>li>strong>Repeat/strong>: Continue using the cursor from the last node of each page until you’ve retrieved all data/li>/ol>p>strong>Key Advantages of Cursor Pagination:/strong>/p>ul>li>strong>Stability/strong>: Cursors remain valid even if new data is added or existing data is modified/li>li>strong>Performance/strong>: More efficient for large datasets as it doesn’t require counting through all previous items/li>li>strong>Consistency/strong>: Avoids duplicate or skipped items when data changes between page requests/li>/ul>p>strong>Example: Using Cursor Pagination/strong>/p>p>strong>First Request (Get first 10 items):/strong>/p>pre>code classlanguage-graphql>query GetWorkHistory($company: CustomerUuid!, $pagination: Pagination) {  AcQuerySessionsHistory(    company: $company    pagination: $pagination  ) {    ... on SessionProtocolEdge {      nodes {        cursor        value {          id          name          sessionCreatedAt        }      }      totalCount    }  }}/code>/pre>p>strong>Variables:/strong>/p>pre>code classlanguage-json>{  "company": "12345678-1234-1234-1234-123456789012",  "pagination": {    "lengthStartingFromOffset": 10  }}/code>/pre>p>strong>Response:/strong>/p>pre>code classlanguage-json>{  "data": {    "AcQuerySessionsHistory": {      "nodes":         {          "cursor": "cursor_abc123",          "value": { "id": "session-1", "name": "Session 1", ... }        },        {          "cursor": "cursor_def456",          "value": { "id": "session-2", "name": "Session 2", ... }        },        // ... 8 more nodes        {          "cursor": "cursor_xyz789",          "value": { "id": "session-10", "name": "Session 10", ... }        }      ,      "totalCount": 100    }  }}/code>/pre>p>strong>Next Request (Get next 10 items using cursor):/strong>/p>pre>code classlanguage-json>{  "company": "12345678-1234-1234-1234-123456789012",  "pagination": {    "cursor": "cursor_xyz789",  // Use cursor from the last node of previous page    "lengthStartingFromOffset": 10  }}/code>/pre>p>strong>cURL Example with Cursor:/strong>/p>pre>code classlanguage-bash># First pagecurl -X POST https://api.example.com/graphql \  -H "Content-Type: application/json" \  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..." \  -d {    "query": "query GetWorkHistory($company: CustomerUuid!, $pagination: Pagination) { AcQuerySessionsHistory(company: $company, pagination: $pagination) { ... on SessionProtocolEdge { nodes { cursor value { id name } } totalCount } } }",    "variables": {      "company": "12345678-1234-1234-1234-123456789012",      "pagination": {        "lengthStartingFromOffset": 10      }    }  }# Next page (using cursor from previous response)curl -X POST https://api.example.com/graphql \  -H "Content-Type: application/json" \  -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..." \  -d {    "query": "query GetWorkHistory($company: CustomerUuid!, $pagination: Pagination) { AcQuerySessionsHistory(company: $company, pagination: $pagination) { ... on SessionProtocolEdge { nodes { cursor value { id name } } totalCount } } }",    "variables": {      "company": "12345678-1234-1234-1234-123456789012",      "pagination": {        "cursor": "cursor_xyz789",        "lengthStartingFromOffset": 10      }    }  }/code>/pre>p>strong>JavaScript Example:/strong>/p>pre>code classlanguage-javascript>async function fetchAllSessions(companyUuid, jwtToken) {  let allSessions  ;  let cursor  null;  let hasMore  true;  while (hasMore) {    const query  `      query GetWorkHistory($company: CustomerUuid!, $pagination: Pagination) {        AcQuerySessionsHistory(company: $company, pagination: $pagination) {          ... on SessionProtocolEdge {            nodes {              cursor              value {                id                name                sessionCreatedAt              }            }            totalCount          }        }      }    `;    const variables  {      company: companyUuid,      pagination: {        lengthStartingFromOffset: 50,        ...(cursor && { cursor })      }    };    const response  await fetch(https://api.example.com/graphql, {      method: POST,      headers: {        Content-Type: application/json,        Authorization: `Bearer ${jwtToken}`      },      body: JSON.stringify({ query, variables })    });    const result  await response.json();    const edge  result.data.AcQuerySessionsHistory;    if (edge.nodes && edge.nodes.length > 0) {      allSessions.push(...edge.nodes.map(node > node.value));      // Get cursor from the last node      cursor  edge.nodesedge.nodes.length - 1.cursor;      // Check if weve retrieved all items      hasMore  allSessions.length < edge.totalCount;    } else {      hasMore  false;    }  }  return allSessions;}/code>/pre>p>strong>Important Notes:/strong>/p>ul>li>strong>Cursor vs Offset/strong>: You can use either code>cursor/code> or code>offset/code>, but not both. If you provide a code>cursor/code>, the code>offset/code> is ignored./li>li>strong>Cursor Format/strong>: The cursor is an opaque string - you should not try to parse or modify it. Always use it exactly as returned./li>li>strong>Cursor Validity/strong>: Cursors are valid for the specific query parameters (sort order, filters, etc.). If you change sort order or filters, you must start from the beginning (without cursor)./li>li>strong>Always Include Cursor in Query/strong>: Make sure to include code>cursor/code> in your GraphQL query selection so you can retrieve it from the response./li>li>strong>Last Page/strong>: When the number of returned nodes is less than code>lengthStartingFromOffset/code>, you’ve reached the last page./li>/ul>p>strong>Return Types:/strong>/p>p>The query returns either:/p>ul>li>a href../reference/index.html#definition-SessionProtocolEdge>code>SessionProtocolEdge/code>/a> - Contains the session data with pagination information/li>li>a href../reference/index.html#definition-Failure>code>Failure/code>/a> - Contains error information if the query fails/li>/ul>p>For detailed work history reference, see: a href../reference/index.html#query-AcQuerySessionsHistory>Work History Reference/a>/p>/main>script>(function() {    use strict;    const tocContainer  document.querySelector(.markdown-toc);    if (!tocContainer) return;    // Wrap TOC content and add toggle button    const tocContent  document.createElement(div);    tocContent.className  toc-content;    // Move all children into the content wrapper    while (tocContainer.firstChild) {        tocContent.appendChild(tocContainer.firstChild);    }    // Add title    const title  document.createElement(div);    title.className  toc-title;    title.textContent  Table of Contents;    tocContent.insertBefore(title, tocContent.firstChild);    // Add toggle button    const toggleButton  document.createElement(button);    toggleButton.className  toc-toggle;    toggleButton.setAttribute(aria-label, Toggle table of contents);    toggleButton.setAttribute(title, Toggle table of contents);    // Add content wrapper and toggle button to container    tocContainer.appendChild(tocContent);    tocContainer.appendChild(toggleButton);    // Toggle functionality    toggleButton.addEventListener(click, function() {        tocContainer.classList.toggle(collapsed);    });    // Get all headings with IDs    const headings  document.querySelectorAll(.markdown-body h2id, .markdown-body h3id, .markdown-body h4id);    const tocLinks  document.querySelectorAll(.markdown-toc a);    if (headings.length  0 || tocLinks.length  0) return;    // Create a map of heading IDs to TOC links    const headingMap  new Map();    tocLinks.forEach(link > {        const href  link.getAttribute(href);        if (href && href.startsWith(#)) {            const id  href.substring(1);            headingMap.set(id, link);        }    });    // Function to update active state    function updateActiveSection() {        // Skip if TOC is collapsed        if (tocContainer.classList.contains(collapsed)) return;        // Remove all active classes        tocLinks.forEach(link > link.classList.remove(active));        // Find the current section in view        let currentHeading  null;        const scrollPosition  window.scrollY + 100; // Offset for better UX        // Check each heading from top to bottom        for (let i  0; i  headings.length; i++) {            const heading  headingsi;            const rect  heading.getBoundingClientRect();            const headingTop  window.scrollY + rect.top;            if (headingTop  scrollPosition) {                currentHeading  heading;            } else {                break;            }        }        // If we found a heading, activate its TOC link        if (currentHeading) {            const id  currentHeading.getAttribute(id);            if (id) {                const tocLink  headingMap.get(id);                if (tocLink) {                    tocLink.classList.add(active);                    // Scroll TOC to show active item if needed                    const tocRect  tocLink.getBoundingClientRect();                    if (tocContainer && tocRect) {                        const containerRect  tocContainer.getBoundingClientRect();                        if (tocRect.bottom > containerRect.bottom || tocRect.top  containerRect.top) {                            tocLink.scrollIntoView({ behavior: smooth, block: nearest });                        }                    }                }            }        }    }    // Update on scroll (throttled for performance)    let ticking  false;    function onScroll() {        if (!ticking) {            window.requestAnimationFrame(() > {                updateActiveSection();                ticking  false;            });            ticking  true;        }    }    // Initial update    updateActiveSection();    // Listen for scroll events    window.addEventListener(scroll, onScroll, { passive: true });    // Update when page loads (in case user lands on a hash)    window.addEventListener(load, updateActiveSection);    // Update when hash changes    window.addEventListener(hashchange, () > {        setTimeout(updateActiveSection, 100);    });})();/script>/body>/html>

Subdomains

Date	Domain	IP
last-stable.productive.pcvisit.de	2024-09-10	3.74.178.211
fast-update.productive.pcvisit.de	2024-07-29	3.127.160.60
productive.productive.pcvisit.de	2024-09-28	52.57.193.52
canary.api.productive.pcvisit.de	2026-02-23	18.172.170.50
productive.shop.productive.pcvisit.de	2023-08-04	3.120.82.104

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > canary.api.productive.pcvisit.de

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains