Skip to content

REST Endpoints

MethodPathRequired scope
GET/api/v1/projectsapi:projects:read
POST/api/v1/projectsapi:projects:write
GET/api/v1/projects/:idapi:projects:read
PATCH/api/v1/projects/:idapi:projects:write
DELETE/api/v1/projects/:idapi:projects:write
GET/api/v1/directory-recordsapi:participants:read
GET/api/v1/participantsapi:participants:read
POST/api/v1/participantsapi:participants:write
GET/api/v1/participants/:idapi:participants:read
PATCH/api/v1/participants/:idapi:participants:write
DELETE/api/v1/participants/:idapi:participants:write
GET/api/v1/participants/:id/membersapi:participants:read
POST/api/v1/participants/:id/membersapi:participants:write
DELETE/api/v1/participants/:id/members/:directory_entry_idapi:participants:write
GET/api/v1/labelsapi:labels:read
POST/api/v1/labelsapi:labels:write
GET/api/v1/labels/:idapi:labels:read
PATCH/api/v1/labels/:idapi:labels:write
DELETE/api/v1/labels/:idapi:labels:write
GET/api/v1/delegationsapi:delegations:read
POST/api/v1/delegationsapi:delegations:write
GET/api/v1/delegations/:idapi:delegations:read
PATCH/api/v1/delegations/:idapi:delegations:write
DELETE/api/v1/delegations/:idapi:delegations:write
POST/api/v1/resolveapi:resolve
GET/api/v1/resolve-requestsapi:resolve-requests:read
GET/api/v1/resolve-requests/:idapi:resolve-requests:read
GET/api/v1/statusapi:status:read
GET/api/v1/observabilityapi:observability:read
GET/api/v1/team-membersapi:team-members:read
POST/api/v1/team-membersapi:team-members:write
GET/api/v1/team-members/:idapi:team-members:read
PATCH, DELETE/api/v1/team-members/:idapi:team-members:write
POST/api/v1/team-members/:id/enable, /api/v1/team-members/:id/disableapi:team-members:write
GET, POST/api/v1/ai-agentsapi:ai-agents:read, api:ai-agents:write
GET, PATCH, DELETE/api/v1/ai-agents/:idapi:ai-agents:read, api:ai-agents:write
POST/api/v1/ai-agents/:id/enable, /api/v1/ai-agents/:id/disableapi:ai-agents:write
GET, POST/api/v1/service-accountsapi:service-accounts:read, api:service-accounts:write
GET, PATCH, DELETE/api/v1/service-accounts/:idapi:service-accounts:read, api:service-accounts:write
POST/api/v1/service-accounts/:id/enable, /api/v1/service-accounts/:id/disableapi:service-accounts:write
GET, POST/api/v1/api-keysapi:api-keys:read, api:api-keys:write
GET, DELETE/api/v1/api-keys/:idapi:api-keys:read, api:api-keys:write
GET/api/v1/audit-events, /api/v1/audit-events/:idapi:audit-events:read
GET/api/v1/model-runs, /api/v1/model-runs/:idapi:model-runs:read
GET, POST/api/v1/provider-connectorsapi:provider-connectors:read, api:provider-connectors:write
GET, PATCH, DELETE/api/v1/provider-connectors/:idapi:provider-connectors:read, api:provider-connectors:write
GET, PATCH/api/v1/platform-settingsapi:platform-settings:read, api:platform-settings:write

Use the entity pages in this section for filters, request bodies, response shape notes, and language-specific examples. See Admin Resources for team members, AI agents, service accounts, API keys, audit events, model runs, provider connectors, and platform settings. Error responses use strict Problem Details and intentionally omit legacy error and message fields.

GET /api/v1/status returns the active deployment and license status. It is available with api:status:read.

Example response:

{
"access": {
"allowed": true,
"code": "ok",
"reason": null
},
"edition": "pro",
"release_channel": "production",
"license": {
"code": "valid"
},
"limits": {
"effective_human_cap": 100,
"effective_team_member_cap": null,
"write_brake_human_cap": 100
},
"features": {
"audit_events": false,
"model_runs": true,
"observability": false
},
"support_tier": "standard",
"term_end": "2027-06-16T00:00:00Z",
"warning": null
}

edition is one of dev_test, free, pro, or enterprise. license.code is one of not_required, missing, valid, grace, or invalid.

GET /api/v1/observability requires api:observability:read, an active admin API-key owner, and Enterprise. It returns database health, worker backlog, active runtime instances, dropped batches, and the sanitized OTLP delivery state.

The response status is disabled, pending, healthy, or degraded. Endpoint values contain origins only—never credentials, headers, or complete paths. delivery_notice explicitly states that exporter health confirms delivery to the OTLP endpoint, not downstream indexing or persistence.

Team members, AI agents, service accounts, API keys, provider connectors, platform settings, and observability are admin-only operational endpoints. Their scopes expose the REST surface, but the API-key owner must still be an active platform admin.

Audit events and model runs are read-only. They also follow edition feature availability from GET /api/v1/status, so unavailable features return a 403 Problem Details response.

Provider connector responses include secret reference names only. They never include secret material. PATCH /api/v1/provider-connectors/:id preserves omitted fields and clears optional fields only when they are sent as null or an empty string.