Cloud REST API — generated inventory

Scope. Every route this binary registers under /api with a literal pattern — the recording mux's whole table, plus the few raw-mux literals — each with its outer auth rung. The BULK of the /api/v1/native, /api/v1/dispatcher and /api/v1/mcp/{board,runs} sub-trees registers through non-literal patterns on the raw mux and stays out, exactly as it stays out of the published spec — while their few literal registrations (the forge-facing card routes of board_forge.go and pipeline_boards.go) ARE in this inventory, marked Spec: no where the offline spec build leaves them unwired. The curated cloud-rest-api.md carries what a generator cannot write: per-route authorization detail, refusal reasons, pitfalls.

Auth rung is the OUTER gate a caller meets, read off the registration line itself (a rung hidden behind a local variable or a closure refuses the generation rather than print a wrong rung):

platform admin — an authenticated platform super-admin (requireSuperAdmin).
session + write rung — the family's write-rung MOUNT (boardWriteAuth / triggerWriteAuth / memoryWriteAuth): an authenticated identity, and at least the member role on a state-changing method. A whole family carries the mount so every line of its registrar reads the same, so this rung also marks that family's GET rows, where it is inert — what a READ requires is the curated page's prose.
session — any authenticated identity; the finer per-resource authorization is the curated page's prose.
open — the operator-JWT gate lets the request through: public bootstrap routes, the CORS preflight responder, and the self-authenticating families (inbound webhook tokens, config-share iws_ tokens, per-run tokens) the curated page names.

Spec marks whether the published openapi.json carries the route. no names a served route the offline spec build does not wire — a family gated on a deployment shape or a literal raw-mux registration — so a client generated from the spec will not know it. Those rows are registered by board_forge.go, local_secrets_routes.go, notifications_routes.go, queue_sweeper.go, schedules_routes.go, server_routes.go.

`/api/admin` family

Method	Path	Auth	Spec
`GET`	`/api/admin/audit`	platform admin	yes
`GET`	`/api/admin/bots`	platform admin	yes
`DELETE`	`/api/admin/bots/{slug}`	platform admin	yes
`GET`	`/api/admin/bots/{slug}`	platform admin	yes
`PUT`	`/api/admin/bots/{slug}`	platform admin	yes
`DELETE`	`/api/admin/bots/{slug}/files/{path...}`	platform admin	yes
`PUT`	`/api/admin/bots/{slug}/files/{path...}`	platform admin	yes
`POST`	`/api/admin/bots/{slug}/fork`	platform admin	yes
`GET`	`/api/admin/credentials/usage`	platform admin	yes
`GET`	`/api/admin/dlq`	platform admin	no
`DELETE`	`/api/admin/dlq/{seq}`	platform admin	no
`GET`	`/api/admin/dlq/{seq}`	platform admin	no
`POST`	`/api/admin/dlq/{seq}/replay`	platform admin	no
`GET`	`/api/admin/forge/oauth-apps`	platform admin	yes
`POST`	`/api/admin/forge/oauth-apps`	platform admin	yes
`DELETE`	`/api/admin/forge/oauth-apps/{app_id}`	platform admin	yes
`GET`	`/api/admin/llm/api-keys`	platform admin	yes
`POST`	`/api/admin/llm/api-keys`	platform admin	yes
`DELETE`	`/api/admin/llm/api-keys/{key_id}`	platform admin	yes
`PATCH`	`/api/admin/llm/api-keys/{key_id}`	platform admin	yes
`GET`	`/api/admin/llm/oauth/connections`	platform admin	yes
`DELETE`	`/api/admin/llm/oauth/{kind}`	platform admin	yes
`PATCH`	`/api/admin/llm/oauth/{kind}`	platform admin	yes
`POST`	`/api/admin/llm/oauth/{kind}/authorize/complete`	platform admin	yes
`POST`	`/api/admin/llm/oauth/{kind}/authorize/start`	platform admin	yes
`POST`	`/api/admin/llm/oauth/{kind}/credentials`	platform admin	yes
`POST`	`/api/admin/llm/oauth/{kind}/refresh`	platform admin	yes
`GET`	`/api/admin/orgs`	platform admin	yes
`POST`	`/api/admin/orgs`	platform admin	yes
`DELETE`	`/api/admin/orgs/{id}`	platform admin	yes
`GET`	`/api/admin/orgs/{id}`	platform admin	yes
`PATCH`	`/api/admin/orgs/{id}`	platform admin	yes
`POST`	`/api/admin/orgs/{id}/restore`	platform admin	yes
`POST`	`/api/admin/orgs/{id}/status`	platform admin	yes
`GET`	`/api/admin/orgs/{id}/teams`	platform admin	yes
`GET`	`/api/admin/orgs/{id}/usage`	platform admin	yes
`GET`	`/api/admin/runner-pools`	platform admin	yes
`PUT`	`/api/admin/runner-pools`	platform admin	yes
`GET`	`/api/admin/runs`	platform admin	yes
`GET`	`/api/admin/settings/bot-roles`	platform admin	yes
`PUT`	`/api/admin/settings/bot-roles`	platform admin	yes
`GET`	`/api/admin/settings/bot-vars`	platform admin	yes
`PUT`	`/api/admin/settings/bot-vars`	platform admin	yes
`GET`	`/api/admin/settings/budget-floor`	platform admin	yes
`PUT`	`/api/admin/settings/budget-floor`	platform admin	yes
`GET`	`/api/admin/settings/maintenance`	platform admin	yes
`PUT`	`/api/admin/settings/maintenance`	platform admin	yes
`GET`	`/api/admin/settings/platform-credentials`	platform admin	yes
`PUT`	`/api/admin/settings/platform-credentials`	platform admin	yes
`GET`	`/api/admin/settings/sandbox`	platform admin	yes
`PUT`	`/api/admin/settings/sandbox`	platform admin	yes
`GET`	`/api/admin/settings/usage-caps`	platform admin	yes
`PUT`	`/api/admin/settings/usage-caps`	platform admin	yes
`PUT`	`/api/admin/teams/{id}/llm-fallback`	platform admin	yes
`PUT`	`/api/admin/teams/{id}/runner-pool`	platform admin	yes
`DELETE`	`/api/admin/tenants/{tenant}/bot-sources/{slug}/history`	platform admin	yes
`DELETE`	`/api/admin/usage-readings/{fingerprint}`	platform admin	yes
`GET`	`/api/admin/users`	platform admin	yes
`GET`	`/api/admin/users/{id}`	platform admin	yes
`PATCH`	`/api/admin/users/{id}`	platform admin	yes
`POST`	`/api/admin/users/{id}/reset-password`	platform admin	yes

`/api/api` family

Method	Path	Auth	Spec
`OPTIONS`	`/api/`	open	yes

`/api/assistant` family

Method	Path	Auth	Spec
`POST`	`/api/v1/assistant/authoring/commit`	session	yes
`POST`	`/api/v1/assistant/authoring/git-commit`	session	yes
`POST`	`/api/v1/assistant/authoring/git-push`	session	yes
`POST`	`/api/v1/assistant/authoring/preview`	session	yes
`POST`	`/api/v1/assistant/authoring/snapshot`	session	yes
`POST`	`/api/v1/assistant/context/resolve`	session	yes
`POST`	`/api/v1/assistant/dependencies/bots-localize`	session	yes
`POST`	`/api/v1/assistant/dependencies/bots-update`	session	yes

`/api/assistant-watches` family

Method	Path	Auth	Spec
`DELETE`	`/api/assistant-watches/{watchID}`	session	yes

`/api/auth` family

Method	Path	Auth	Spec
`POST`	`/api/auth/desktop/exchange`	open	yes
`POST`	`/api/auth/invitations/accept`	open	yes
`GET`	`/api/auth/invitations/lookup`	open	yes
`POST`	`/api/auth/login`	open	yes
`POST`	`/api/auth/logout`	open	yes
`GET`	`/api/auth/me`	session	yes
`POST`	`/api/auth/me/org/{org_id}`	session	yes
`POST`	`/api/auth/me/team/{team_id}`	session	yes
`GET`	`/api/auth/oidc/github/callback/orgs`	open	yes
`GET`	`/api/auth/oidc/{provider}/callback`	open	yes
`GET`	`/api/auth/oidc/{provider}/start`	open	yes
`POST`	`/api/auth/password/change`	open	yes
`POST`	`/api/auth/password/reset/confirm`	open	yes
`POST`	`/api/auth/password/reset/request`	open	yes
`GET`	`/api/auth/providers`	open	yes
`POST`	`/api/auth/refresh`	open	yes
`POST`	`/api/auth/register`	open	yes

`/api/backends` family

Method	Path	Auth	Spec
`GET`	`/api/backends/detect`	session	yes

`/api/bots` family

Method	Path	Auth	Spec
`GET`	`/api/v1/bots`	session	yes
`POST`	`/api/v1/bots`	session	yes
`POST`	`/api/v1/bots/import`	session	yes
`POST`	`/api/v1/bots/install`	session	yes
`GET`	`/api/v1/bots/templates`	session	yes
`POST`	`/api/v1/bots/upload`	session	yes
`GET`	`/api/v1/bots/{name}`	session	yes
`PUT`	`/api/v1/bots/{name}`	session	yes
`PUT`	`/api/v1/bots/{name}/overlay`	session	yes
`POST`	`/api/v1/bots/{name}/triggers/from-invocation`	session + write rung	yes

`/api/config-share` family

Method	Path	Auth	Spec
`GET`	`/api/config-share/{id}/config`	open	yes
`PATCH`	`/api/config-share/{id}/config`	open	yes
`GET`	`/api/config-share/{id}/meta`	open	yes

`/api/effort-capabilities` family

Method	Path	Auth	Spec
`GET`	`/api/effort-capabilities`	session	yes

`/api/examples` family

Method	Path	Auth	Spec
`GET`	`/api/examples`	session	yes
`GET`	`/api/examples/{name...}`	session	yes

`/api/files` family

Method	Path	Auth	Spec
`GET`	`/api/files`	session	yes
`POST`	`/api/files/dependency`	session	yes
`POST`	`/api/files/open`	session	yes
`POST`	`/api/files/save`	session	yes

`/api/filesystem` family

Method	Path	Auth	Spec
`GET`	`/api/filesystem/list`	session	yes

`/api/forge` family

Method	Path	Auth	Spec
`GET`	`/api/forge/github/app-manifest/callback`	open	yes
`GET`	`/api/forge/github/app/callback`	open	yes
`GET`	`/api/forge/github/orgs/start`	session	yes
`GET`	`/api/forge/oauth/callback`	open	yes
`POST`	`/api/v1/forge/delivery-preflight`	open	no
`POST`	`/api/v1/forge/publish-review`	open	no
`GET`	`/api/v1/forge/pull-request`	open	no

`/api/legal` family

Method	Path	Auth	Spec
`GET`	`/api/legal/{slug}`	open	yes

`/api/limits` family

Method	Path	Auth	Spec
`GET`	`/api/v1/limits/cost`	session	yes
`POST`	`/api/v1/limits/cost/override`	session	yes

`/api/local` family

Method	Path	Auth	Spec
`GET`	`/api/local/secrets`	session	no
`POST`	`/api/local/secrets`	session	no
`DELETE`	`/api/local/secrets/{secret_id}`	session	no
`PATCH`	`/api/local/secrets/{secret_id}`	session	no
`GET`	`/api/local/skills`	session	yes
`POST`	`/api/local/skills`	session	yes
`DELETE`	`/api/local/skills/{name}`	session	yes
`GET`	`/api/local/skills/{name}`	session	yes
`PUT`	`/api/local/skills/{name}`	session	yes

`/api/marketplace` family

Method	Path	Auth	Spec
`GET`	`/api/v1/marketplace/bots`	open	yes
`GET`	`/api/v1/marketplace/bots/{slug}`	open	yes
`GET`	`/api/v1/marketplace/bots/{slug}/download`	open	yes
`DELETE`	`/api/v1/marketplace/bots/{slug}/install`	session	yes
`POST`	`/api/v1/marketplace/bots/{slug}/install`	session	yes
`GET`	`/api/v1/marketplace/config`	open	yes
`GET`	`/api/v1/marketplace/moderation`	session	yes
`POST`	`/api/v1/marketplace/moderation/{slug}/approve`	session	yes
`POST`	`/api/v1/marketplace/moderation/{slug}/reject`	session	yes
`POST`	`/api/v1/marketplace/submit`	session	yes

`/api/me` family

Method	Path	Auth	Spec
`GET`	`/api/me/api-keys`	session	yes
`POST`	`/api/me/api-keys`	session	yes
`DELETE`	`/api/me/api-keys/{key_id}`	session	yes
`PATCH`	`/api/me/api-keys/{key_id}`	session	yes
`GET`	`/api/me/github-orgs`	session	yes
`GET`	`/api/me/oauth/connections`	session	yes
`DELETE`	`/api/me/oauth/{kind}`	session	yes
`PATCH`	`/api/me/oauth/{kind}`	session	yes
`POST`	`/api/me/oauth/{kind}/authorize/complete`	session	yes
`POST`	`/api/me/oauth/{kind}/authorize/start`	session	yes
`POST`	`/api/me/oauth/{kind}/credentials`	session	yes
`POST`	`/api/me/oauth/{kind}/refresh`	session	yes
`POST`	`/api/me/password`	session	yes
`GET`	`/api/me/pool`	session	yes
`GET`	`/api/me/pool/history`	session	yes
`DELETE`	`/api/me/pool/{source}/{ref}`	session	yes
`PUT`	`/api/me/pool/{source}/{ref}`	session	yes
`GET`	`/api/me/secrets`	session	yes
`POST`	`/api/me/secrets`	session	yes
`DELETE`	`/api/me/secrets/{secret_id}`	session	yes
`PATCH`	`/api/me/secrets/{secret_id}`	session	yes
`POST`	`/api/me/sessions/revoke-all`	session	yes
`GET`	`/api/me/sso/links`	session	yes
`DELETE`	`/api/me/sso/links/{provider}/{subject}`	session	yes
`GET`	`/api/me/sso/{provider}/link/start`	session	yes
`GET`	`/api/me/tokens`	session	yes
`POST`	`/api/me/tokens`	session	yes
`DELETE`	`/api/me/tokens/{token_id}`	session	yes

`/api/memory` family

Method	Path	Auth	Spec
`DELETE`	`/api/memory/doc`	session + write rung	yes
`GET`	`/api/memory/doc`	session + write rung	yes
`PUT`	`/api/memory/doc`	session + write rung	yes
`GET`	`/api/memory/docs`	session + write rung	yes
`GET`	`/api/memory/export`	session + write rung	yes
`POST`	`/api/memory/import`	session + write rung	yes
`GET`	`/api/memory/usage`	session + write rung	yes

`/api/model-capabilities` family

Method	Path	Auth	Spec
`GET`	`/api/model-capabilities`	session	yes

`/api/models` family

Method	Path	Auth	Spec
`GET`	`/api/models`	session	yes

`/api/native` family

Method	Path	Auth	Spec
`GET`	`/api/v1/native/issues/{id}/dependency-graph`	session + write rung	yes
`GET`	`/api/v1/native/issues/{id}/pulls`	session + write rung	no
`POST`	`/api/v1/native/issues/{id}/pulls`	session + write rung	no
`GET`	`/api/v1/native/issues/{id}/pulls/{number}/ci`	session + write rung	no
`POST`	`/api/v1/native/issues/{id}/pulls/{number}/merge`	session + write rung	no
`POST`	`/api/v1/native/issues/{id}/push`	session + write rung	no

`/api/notifications` family

Method	Path	Auth	Spec
`GET`	`/api/v1/notifications/prefs`	session	no
`PUT`	`/api/v1/notifications/prefs`	session	no
`DELETE`	`/api/v1/notifications/push/subscriptions`	session	no
`POST`	`/api/v1/notifications/push/subscriptions`	session	no
`POST`	`/api/v1/notifications/push/test`	session	no

`/api/openapi.json` family

Method	Path	Auth	Spec
`GET`	`/api/openapi.json`	session	yes

`/api/orgs` family

Method	Path	Auth	Spec
`GET`	`/api/orgs/{id}`	session	yes
`GET`	`/api/orgs/{id}/api-keys`	session	yes
`POST`	`/api/orgs/{id}/api-keys`	session	yes
`DELETE`	`/api/orgs/{id}/api-keys/{key_id}`	session	yes
`PATCH`	`/api/orgs/{id}/api-keys/{key_id}`	session	yes
`GET`	`/api/orgs/{id}/audit`	session	yes
`GET`	`/api/orgs/{id}/credential-audience`	session	yes
`PATCH`	`/api/orgs/{id}/credential-audience`	session	yes
`GET`	`/api/orgs/{id}/invitations`	session	yes
`POST`	`/api/orgs/{id}/invitations`	session	yes
`DELETE`	`/api/orgs/{id}/invitations/{invite_id}`	session	yes
`GET`	`/api/orgs/{id}/members`	session	yes
`DELETE`	`/api/orgs/{id}/members/{user_id}`	session	yes
`PATCH`	`/api/orgs/{id}/members/{user_id}`	session	yes
`PUT`	`/api/orgs/{id}/members/{user_id}`	session	yes
`GET`	`/api/orgs/{id}/oauth/connections`	session	yes
`DELETE`	`/api/orgs/{id}/oauth/{kind}`	session	yes
`PATCH`	`/api/orgs/{id}/oauth/{kind}`	session	yes
`POST`	`/api/orgs/{id}/oauth/{kind}/authorize/complete`	session	yes
`POST`	`/api/orgs/{id}/oauth/{kind}/authorize/start`	session	yes
`POST`	`/api/orgs/{id}/oauth/{kind}/credentials`	session	yes
`POST`	`/api/orgs/{id}/oauth/{kind}/refresh`	session	yes
`GET`	`/api/orgs/{id}/provision-approvals`	session	yes
`POST`	`/api/orgs/{id}/provision-approvals/{approval_id}/approve`	session	yes
`POST`	`/api/orgs/{id}/provision-approvals/{approval_id}/reject`	session	yes
`GET`	`/api/orgs/{id}/routing-policy`	session	yes
`PUT`	`/api/orgs/{id}/routing-policy`	session	yes
`GET`	`/api/orgs/{id}/settings`	session	yes
`PATCH`	`/api/orgs/{id}/settings`	session	yes
`GET`	`/api/orgs/{id}/sso/domains`	session	yes
`POST`	`/api/orgs/{id}/sso/domains`	session	yes
`DELETE`	`/api/orgs/{id}/sso/domains/{domain_id}`	session	yes
`POST`	`/api/orgs/{id}/sso/domains/{domain_id}/verify`	session	yes
`GET`	`/api/orgs/{id}/sso/providers`	session	yes
`POST`	`/api/orgs/{id}/sso/providers`	session	yes
`DELETE`	`/api/orgs/{id}/sso/providers/{provider_id}`	session	yes
`PATCH`	`/api/orgs/{id}/sso/providers/{provider_id}`	session	yes
`POST`	`/api/orgs/{id}/sso/providers/{provider_id}/test`	session	yes
`GET`	`/api/orgs/{id}/teams`	session	yes
`POST`	`/api/orgs/{id}/teams`	session	yes
`PATCH`	`/api/orgs/{id}/teams/{team_id}/caps`	session	yes
`GET`	`/api/orgs/{id}/usage`	session	yes

`/api/parse` family

Method	Path	Auth	Spec
`POST`	`/api/parse`	session	yes

`/api/pipeline-board` family

Method	Path	Auth	Spec
`GET`	`/api/v1/pipeline-board`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/bulk/delete`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/bulk/ready`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/bulk/recompute-deps`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/tasks`	session + write rung	yes
`DELETE`	`/api/v1/pipeline-board/tasks/{id}`	session + write rung	yes
`PATCH`	`/api/v1/pipeline-board/tasks/{id}`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/tasks/{id}/close`	session + write rung	yes
`GET`	`/api/v1/pipeline-board/tasks/{id}/dependency-graph`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/tasks/{id}/launch`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/tasks/{id}/ready`	session + write rung	yes
`POST`	`/api/v1/pipeline-board/tasks/{id}/reset`	session + write rung	yes
`GET`	`/api/v1/pipeline-board/workspace-images/{path...}`	session + write rung	yes

`/api/plugins` family

Method	Path	Auth	Spec
`GET`	`/api/v1/plugins`	session	yes
`POST`	`/api/v1/plugins/install`	platform admin	yes
`DELETE`	`/api/v1/plugins/{name}`	platform admin	yes
`GET`	`/api/v1/plugins/{name}`	session	yes
`PUT`	`/api/v1/plugins/{name}/config`	platform admin	yes
`POST`	`/api/v1/plugins/{name}/disable`	platform admin	yes
`POST`	`/api/v1/plugins/{name}/enable`	platform admin	yes
`POST`	`/api/v1/plugins/{name}/lifecycle/{phase}`	platform admin	yes

`/api/preferences` family

Method	Path	Auth	Spec
`DELETE`	`/api/v1/preferences/model`	session	yes
`GET`	`/api/v1/preferences/model`	session	yes
`PUT`	`/api/v1/preferences/model`	session	yes

`/api/projects` family

Method	Path	Auth	Spec
`GET`	`/api/projects`	session	yes
`POST`	`/api/projects`	session	yes
`GET`	`/api/projects/current`	session	yes
`POST`	`/api/projects/switch`	session	yes
`DELETE`	`/api/projects/{id}`	session	yes

`/api/resolve-effort` family

Method	Path	Auth	Spec
`GET`	`/api/resolve-effort`	session	yes

`/api/resolve-model` family

Method	Path	Auth	Spec
`GET`	`/api/resolve-model`	session	yes

`/api/routes` family

Method	Path	Auth	Spec
`GET`	`/api/routes`	session	yes

`/api/runs` family

Method	Path	Auth	Spec
`GET`	`/api/runs`	session	yes
`POST`	`/api/runs`	session	yes
`GET`	`/api/runs/global-active`	session	yes
`POST`	`/api/runs/preview-cost`	session	yes
`POST`	`/api/runs/uploads`	session	yes
`DELETE`	`/api/runs/{id}`	session	yes
`GET`	`/api/runs/{id}`	session	yes
`POST`	`/api/runs/{id}/answer-human`	session	yes
`GET`	`/api/runs/{id}/artifact-files`	session	yes
`GET`	`/api/runs/{id}/artifact-files/{path...}`	session	yes
`GET`	`/api/runs/{id}/artifacts`	session	yes
`GET`	`/api/runs/{id}/artifacts/{node}`	session	yes
`GET`	`/api/runs/{id}/artifacts/{node}/{version}`	session	yes
`GET`	`/api/runs/{id}/assistant-missions`	session	yes
`POST`	`/api/runs/{id}/assistant-missions`	session	yes
`GET`	`/api/runs/{id}/assistant-missions/{missionID}`	session	yes
`POST`	`/api/runs/{id}/assistant-missions/{missionID}/stop`	session	yes
`GET`	`/api/runs/{id}/assistant-watch-health`	session	yes
`GET`	`/api/runs/{id}/assistant-watches`	session	yes
`POST`	`/api/runs/{id}/assistant-watches`	session	yes
`DELETE`	`/api/runs/{id}/assistant-watches/{watchID}`	session	yes
`GET`	`/api/runs/{id}/attachments/{name}`	session	yes
`GET`	`/api/runs/{id}/attachments/{name}/url`	session	yes
`POST`	`/api/runs/{id}/browser/attach`	session	yes
`GET`	`/api/runs/{id}/browser/cdp`	session	yes
`POST`	`/api/runs/{id}/bump-loop`	session	yes
`POST`	`/api/runs/{id}/cancel`	session	yes
`GET`	`/api/runs/{id}/children`	session	yes
`POST`	`/api/runs/{id}/commit-and-finalize`	session	yes
`GET`	`/api/runs/{id}/commits`	session	yes
`GET`	`/api/runs/{id}/commits/{sha}`	session	yes
`GET`	`/api/runs/{id}/commits/{sha}/diff`	session	yes
`GET`	`/api/runs/{id}/diagnostic`	session	yes
`GET`	`/api/runs/{id}/events`	session	yes
`GET`	`/api/runs/{id}/files`	session	yes
`GET`	`/api/runs/{id}/files/content`	session	yes
`PUT`	`/api/runs/{id}/files/content`	session	yes
`GET`	`/api/runs/{id}/files/diff`	session	yes
`GET`	`/api/runs/{id}/files/touched`	session	yes
`POST`	`/api/runs/{id}/fork`	session	yes
`POST`	`/api/runs/{id}/host-event`	session	yes
`GET`	`/api/runs/{id}/interactions/pending`	session	yes
`POST`	`/api/runs/{id}/interactions/{iid}/answer`	session	yes
`GET`	`/api/runs/{id}/log`	session	yes
`POST`	`/api/runs/{id}/merge`	session	yes
`GET`	`/api/runs/{id}/merge/conflicts`	session	yes
`POST`	`/api/runs/{id}/merge/conflicts/abort`	session	yes
`POST`	`/api/runs/{id}/merge/conflicts/finalize`	session	yes
`POST`	`/api/runs/{id}/merge/conflicts/resolve`	session	yes
`POST`	`/api/runs/{id}/merge/conflicts/resolve-with-agent`	session	yes
`GET`	`/api/runs/{id}/nodes/{node}/changes`	session	yes
`GET`	`/api/runs/{id}/nodes/{node}/diff`	session	yes
`GET`	`/api/runs/{id}/notes`	session	yes
`POST`	`/api/runs/{id}/notes`	session	yes
`POST`	`/api/runs/{id}/pause`	session	yes
`GET`	`/api/runs/{id}/plans`	session	yes
`GET`	`/api/runs/{id}/preview`	session	yes
`POST`	`/api/runs/{id}/queue-message`	session	yes
`DELETE`	`/api/runs/{id}/queue-message/{msgID}`	session	yes
`GET`	`/api/runs/{id}/queue-messages`	session	yes
`POST`	`/api/runs/{id}/raise-budget`	session	yes
`POST`	`/api/runs/{id}/rename`	session	yes
`POST`	`/api/runs/{id}/resume`	session	yes
`GET`	`/api/runs/{id}/review/diff`	session	yes
`GET`	`/api/runs/{id}/review/scope`	session	yes
`POST`	`/api/runs/{id}/rewind`	session	yes
`GET`	`/api/runs/{id}/route-decisions`	session	yes
`GET`	`/api/runs/{id}/session-board`	session	yes
`GET`	`/api/runs/{id}/skills`	session	yes
`GET`	`/api/runs/{id}/tags`	session	yes
`PUT`	`/api/runs/{id}/tags`	session	yes
`GET`	`/api/runs/{id}/tools/{toolUseID}/{kind}`	session	yes
`DELETE`	`/api/runs/{id}/watch/{issueID}`	session	yes
`POST`	`/api/runs/{id}/watch/{issueID}`	session	yes
`GET`	`/api/runs/{id}/watching`	session	yes
`GET`	`/api/runs/{id}/workflow`	session	yes
`GET`	`/api/runs/{id}/workspace-files/{path...}`	session	yes
`GET`	`/api/v1/runs/repos`	session	yes
`GET`	`/api/v1/runs/stats`	session	yes

`/api/server` family

Method	Path	Auth	Spec
`GET`	`/api/server/info`	open	yes

`/api/teams` family

Method	Path	Auth	Spec
`GET`	`/api/teams`	session	yes
`POST`	`/api/teams`	session	yes
`DELETE`	`/api/teams/{id}`	session	yes
`GET`	`/api/teams/{id}`	session	yes
`PATCH`	`/api/teams/{id}`	session	yes
`GET`	`/api/teams/{id}/api-keys`	session	yes
`POST`	`/api/teams/{id}/api-keys`	session	yes
`DELETE`	`/api/teams/{id}/api-keys/{key_id}`	session	yes
`PATCH`	`/api/teams/{id}/api-keys/{key_id}`	session	yes
`GET`	`/api/teams/{id}/audit`	session	yes
`DELETE`	`/api/teams/{id}/board-binding`	session	yes
`GET`	`/api/teams/{id}/board-binding`	session	yes
`PUT`	`/api/teams/{id}/board-binding`	session	yes
`GET`	`/api/teams/{id}/bot-sources`	session	yes
`DELETE`	`/api/teams/{id}/bot-sources/{slug}`	session	yes
`GET`	`/api/teams/{id}/bot-sources/{slug}`	session	yes
`PUT`	`/api/teams/{id}/bot-sources/{slug}`	session	yes
`DELETE`	`/api/teams/{id}/bot-sources/{slug}/files/{path...}`	session	yes
`PUT`	`/api/teams/{id}/bot-sources/{slug}/files/{path...}`	session	yes
`POST`	`/api/teams/{id}/bot-sources/{slug}/fork`	session	yes
`GET`	`/api/teams/{id}/bots/{bot_id}/bindings`	session	yes
`POST`	`/api/teams/{id}/bots/{bot_id}/bindings`	session	yes
`DELETE`	`/api/teams/{id}/bots/{bot_id}/bindings/{binding_id}`	session	yes
`PATCH`	`/api/teams/{id}/bots/{bot_id}/bindings/{binding_id}`	session	yes
`GET`	`/api/teams/{id}/config-editor/shares`	session	yes
`GET`	`/api/teams/{id}/config-editor/shares/{sid}/config`	session	yes
`PATCH`	`/api/teams/{id}/config-editor/shares/{sid}/config`	session	yes
`GET`	`/api/teams/{id}/config-editor/shares/{sid}/runs`	session	yes
`GET`	`/api/teams/{id}/config-editor/shares/{sid}/schedule`	session	yes
`PATCH`	`/api/teams/{id}/config-editor/shares/{sid}/schedule`	session	yes
`GET`	`/api/teams/{id}/config-shares`	session	yes
`POST`	`/api/teams/{id}/config-shares`	session	yes
`DELETE`	`/api/teams/{id}/config-shares/{sid}`	session	yes
`GET`	`/api/teams/{id}/config-shares/{sid}/deliveries`	session	yes
`POST`	`/api/teams/{id}/config-shares/{sid}/rotate`	session	yes
`GET`	`/api/teams/{id}/connections`	session	yes
`POST`	`/api/teams/{id}/connections`	session	yes
`DELETE`	`/api/teams/{id}/connections/{conn_id}`	session	yes
`GET`	`/api/teams/{id}/connections/{conn_id}`	session	yes
`PATCH`	`/api/teams/{id}/connections/{conn_id}`	session	yes
`POST`	`/api/teams/{id}/credentials/preview`	session	yes
`GET`	`/api/teams/{id}/credentials/usage`	session	yes
`GET`	`/api/teams/{id}/forge/connections`	session	yes
`POST`	`/api/teams/{id}/forge/connections`	session	yes
`DELETE`	`/api/teams/{id}/forge/connections/{conn_id}`	session	yes
`PATCH`	`/api/teams/{id}/forge/connections/{conn_id}`	session	yes
`POST`	`/api/teams/{id}/forge/connections/{conn_id}/avatar`	session	yes
`GET`	`/api/teams/{id}/forge/connections/{conn_id}/health`	session	yes
`POST`	`/api/teams/{id}/forge/connections/{conn_id}/reauthorize`	session	yes
`POST`	`/api/teams/{id}/forge/connections/{conn_id}/refresh`	session	yes
`GET`	`/api/teams/{id}/forge/connections/{conn_id}/repos`	session	yes
`PATCH`	`/api/teams/{id}/forge/integrations/{iid}`	session	no
`GET`	`/api/teams/{id}/forge/integrations/{iid}/hooks`	session	no
`POST`	`/api/teams/{id}/forge/integrations/{iid}/sync`	session	no
`GET`	`/api/teams/{id}/forge/oauth-apps`	session	yes
`POST`	`/api/teams/{id}/forge/oauth-apps`	session	yes
`POST`	`/api/teams/{id}/forge/oauth-apps/github-manifest`	session	yes
`DELETE`	`/api/teams/{id}/forge/oauth-apps/{app_id}`	session	yes
`GET`	`/api/teams/{id}/forge/repo-bots`	session	yes
`POST`	`/api/teams/{id}/forge/repo-bots`	session	yes
`GET`	`/api/teams/{id}/forge/repo-bots/preview`	session	yes
`DELETE`	`/api/teams/{id}/forge/repo-bots/{integration_id}`	session	yes
`PATCH`	`/api/teams/{id}/forge/repo-bots/{integration_id}`	session	yes
`GET`	`/api/teams/{id}/forge/repos`	session	yes
`POST`	`/api/teams/{id}/forge/repos`	session	yes
`GET`	`/api/teams/{id}/invitations`	session	yes
`POST`	`/api/teams/{id}/invitations`	session	yes
`DELETE`	`/api/teams/{id}/invitations/{invite_id}`	session	yes
`GET`	`/api/teams/{id}/members`	session	yes
`DELETE`	`/api/teams/{id}/members/{user_id}`	session	yes
`PATCH`	`/api/teams/{id}/members/{user_id}`	session	yes
`PUT`	`/api/teams/{id}/members/{user_id}`	session	yes
`GET`	`/api/teams/{id}/oauth/connections`	session	yes
`DELETE`	`/api/teams/{id}/oauth/{kind}`	session	yes
`PATCH`	`/api/teams/{id}/oauth/{kind}`	session	yes
`POST`	`/api/teams/{id}/oauth/{kind}/authorize/complete`	session	yes
`POST`	`/api/teams/{id}/oauth/{kind}/authorize/start`	session	yes
`POST`	`/api/teams/{id}/oauth/{kind}/credentials`	session	yes
`POST`	`/api/teams/{id}/oauth/{kind}/refresh`	session	yes
`GET`	`/api/teams/{id}/plugin-sources`	session	yes
`POST`	`/api/teams/{id}/plugin-sources`	session	yes
`DELETE`	`/api/teams/{id}/plugin-sources/{source_id}`	session	yes
`PATCH`	`/api/teams/{id}/plugin-sources/{source_id}`	session	yes
`GET`	`/api/teams/{id}/pool`	session	yes
`PUT`	`/api/teams/{id}/pool`	session	yes
`GET`	`/api/teams/{id}/provision-approvals`	session	yes
`GET`	`/api/teams/{id}/routing-policy`	session	yes
`PUT`	`/api/teams/{id}/routing-policy`	session	yes
`PUT`	`/api/teams/{id}/run-visibility`	session	yes
`GET`	`/api/teams/{id}/schedules`	session	no
`POST`	`/api/teams/{id}/schedules`	session	no
`DELETE`	`/api/teams/{id}/schedules/{sid}`	session	no
`PATCH`	`/api/teams/{id}/schedules/{sid}`	session	no
`GET`	`/api/teams/{id}/secrets`	session	yes
`POST`	`/api/teams/{id}/secrets`	session	yes
`DELETE`	`/api/teams/{id}/secrets/{secret_id}`	session	yes
`PATCH`	`/api/teams/{id}/secrets/{secret_id}`	session	yes
`POST`	`/api/teams/{id}/status`	session	yes
`GET`	`/api/teams/{id}/webhooks`	session	yes
`POST`	`/api/teams/{id}/webhooks`	session	yes
`DELETE`	`/api/teams/{id}/webhooks/{webhook_id}`	session	yes
`GET`	`/api/teams/{id}/webhooks/{webhook_id}`	session	yes
`PATCH`	`/api/teams/{id}/webhooks/{webhook_id}`	session	yes
`GET`	`/api/teams/{id}/webhooks/{webhook_id}/deliveries`	session	yes
`POST`	`/api/teams/{id}/webhooks/{webhook_id}/rotate`	session	yes

`/api/triggers` family

Method	Path	Auth	Spec
`GET`	`/api/v1/triggers`	session + write rung	yes
`POST`	`/api/v1/triggers`	session + write rung	yes
`POST`	`/api/v1/triggers/emit`	session + write rung	yes
`GET`	`/api/v1/triggers/health`	session + write rung	yes
`DELETE`	`/api/v1/triggers/{id}`	session + write rung	yes
`GET`	`/api/v1/triggers/{id}`	session + write rung	yes
`PUT`	`/api/v1/triggers/{id}`	session + write rung	yes

`/api/unparse` family

Method	Path	Auth	Spec
`POST`	`/api/unparse`	session	yes

`/api/validate` family

Method	Path	Auth	Spec
`POST`	`/api/validate`	session	yes

`/api/webhooks` family

Method	Path	Auth	Spec
`POST`	`/api/webhooks/deliveries/{id}/retry`	platform admin	yes
`POST`	`/api/webhooks/forgejo/{id}`	open	yes
`POST`	`/api/webhooks/generic/{id}`	open	yes
`POST`	`/api/webhooks/github/{id}`	open	yes
`POST`	`/api/webhooks/gitlab/{id}`	open	yes

`/api/ws` family

Method	Path	Auth	Spec
`GET`	`/api/ws`	session	yes
`GET`	`/api/ws/runs/{id}`	session	yes
`GET`	`/api/ws/runs/{id}/shell`	session	yes
`POST`	`/api/ws/ticket`	session	yes

Cloud REST API — generated inventory ​

/api/admin family ​

/api/api family ​

/api/assistant family ​

/api/assistant-watches family ​

/api/auth family ​

/api/backends family ​

/api/bots family ​

/api/config-share family ​

/api/effort-capabilities family ​

/api/examples family ​

/api/files family ​

/api/filesystem family ​

/api/forge family ​

/api/legal family ​

/api/limits family ​

/api/local family ​

/api/marketplace family ​

/api/me family ​

/api/memory family ​

/api/model-capabilities family ​

/api/models family ​

/api/native family ​

/api/notifications family ​

/api/openapi.json family ​

/api/orgs family ​

/api/parse family ​

/api/pipeline-board family ​

/api/plugins family ​

/api/preferences family ​

/api/projects family ​

/api/resolve-effort family ​

/api/resolve-model family ​

/api/routes family ​

/api/runs family ​

/api/server family ​

/api/teams family ​

/api/triggers family ​

/api/unparse family ​

/api/validate family ​

/api/webhooks family ​

/api/ws family ​