oc-sentinel/docs/ocsentinel-n8n-contract.md

OfficeCom Sentinel n8n Contract

Request

• method: POST
• content type: application/json
• example webhook: https://n8n.example.com/webhook/ocsentinel-ingest

Required Payload Intent

The endpoint should send one signed JSON document per scan run containing:

• device identity
• client version
• scan metadata
• attack findings
• CVE correlation summary
• raw status fields needed for downstream NinjaOne updates

Expected Downstream Work

n8n is responsible for:

• ingest validation
• storage in the central backend
• organization-wide aggregation
• NinjaOne organization API updates

PostgreSQL Scope

• The client only knows its outward upload destination.
• PostgreSQL connection details belong to the internal ingest or n8n side.
• If the PostgreSQL IP changes, update the internal server-side configuration and review it during the next release.