# OfficeCom Sentinel n8n Contract

## Request

- method: `POST`
- content type: `application/json`
- example webhook: `https://n8n.example.com/webhook/ocsentinel-ingest`

## Required Payload Intent

The endpoint should send one signed JSON document per scan run containing:

- device identity
- client version
- scan metadata
- attack findings
- CVE correlation summary
- raw status fields needed for downstream NinjaOne updates

## Expected Downstream Work

n8n is responsible for:

- ingest validation
- storage in the central backend
- organization-wide aggregation
- NinjaOne organization API updates

## PostgreSQL Scope

- The client only knows its outward upload destination.
- PostgreSQL connection details belong to the internal ingest or n8n side.
- If the PostgreSQL IP changes, update the internal server-side configuration and review it during the next release.