Skip to main content
The REST operations group under Reference renders every application operation directly from openapi.yaml, including request validation, required scopes, owner-session restrictions, and JSON response schemas. This is the same generated artifact verified by CI and available to API clients. All application endpoints use /api/v1. Authenticate with a scoped bearer token or an interactive owner session; credential management and trace replay require an interactive owner session. Errors use { "error": { "code": "...", "message": "..." } }. GET /healthz is the unauthenticated infrastructure liveness probe and returns { "ok": true }. It is outside the application API contract. See authentication for access setup and OpenAPI definition for downloading or regenerating the contract.