Skip to main content
A REST API over workspaces, files, agents, and everything an agent can reach. Every page here is generated from the same OpenAPI spec the API serves, so the schemas match what the server accepts.

Base URL

Authentication

Pass an API key in the X-API-Key header:
A user access token works too, as Authorization: Bearer <token>. A few account-level routes accept only a user session; those say so on the page. Not sure what a key is? GET /api/auth/principal reports whether it authenticates as a user or a service account, and which organization it is bound to. See Authentication and API keys.

Error format

Errors are JSON with a detail string:

Where to start

Conventions

  • Paths are workspace-relative and start with /, for example /data/report.csv.
  • Long work is asynchronous. Endpoints that start something return an id to poll rather than holding the connection open.
  • Repeat safely. Where an operation supports it, send an idempotency key so a retry returns the original result instead of doing the work twice.