Base API surfaces

• Health: /api/ok
• Swagger UI: /swagger
• Auth endpoints: /api/auth/*

Authentication modes

Requests are accepted with one of the following:

• Auth session bearer token
• API key via Authorization: Bearer <key>
• API key via x-api-key header

Primary endpoint groups

• /api/schema/* for schema snapshots and TypeScript output
• /api/schema/backups/* for backup list/download/rollback
• /api/api-keys/* for API key lifecycle operations
• /api/team-members/* and /api/auth/invite-signup/* for team/invite flows
• /api/triggers/* for manual external trigger management/execution
• Generated content endpoints based on your schema

Example

curl -H "Authorization: Bearer <api-key>" \
  http://localhost:4002/api/schema/latestSnapshot

Permission model

API access is permission-gated. Issue keys with minimum required scopes for each integration.