Platform API Reference

FieldValue
Source specplatform/openapi/v1.json
OpenAPI version3.1.1
API version1.0.0
Operations332
Path filterAll paths

Operations

GET /api/analytics/attestation-coverage

Get attestation coverage analytics

Returns attestation coverage gaps by environment.

PropertyValue
Operation IDGetAnalyticsAttestationCoverage
TagsAnalytics
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
503Service Unavailable-

GET /api/analytics/backlog

Get fixable vulnerability backlog

Returns vulnerabilities with available fixes, filtered by environment.

PropertyValue
Operation IDGetAnalyticsBacklog
TagsAnalytics
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
503Service Unavailable-

GET /api/analytics/licenses

Get license distribution analytics

Returns component and artifact counts grouped by license.

PropertyValue
Operation IDGetAnalyticsLicenses
TagsAnalytics
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
503Service Unavailable-

GET /api/analytics/suppliers

Get supplier concentration analytics

Returns the top suppliers by component and artifact exposure.

PropertyValue
Operation IDGetAnalyticsSuppliers
TagsAnalytics
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
503Service Unavailable-

GET /api/analytics/trends/components

Get component trend analytics

Returns daily component trend points for a time window.

PropertyValue
Operation IDGetAnalyticsComponentTrends
TagsAnalytics
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Daysqueryno
Environmentqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
503Service Unavailable-

GET /api/analytics/trends/vulnerabilities

Get vulnerability trend analytics

Returns daily vulnerability trend points for a time window.

PropertyValue
Operation IDGetAnalyticsVulnerabilityTrends
TagsAnalytics
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Daysqueryno
Environmentqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
503Service Unavailable-

GET /api/analytics/vulnerabilities

Get vulnerability exposure analytics

Returns vulnerability exposure by severity, filtered by environment and minimum severity.

PropertyValue
Operation IDGetAnalyticsVulnerabilities
TagsAnalytics
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
minSeverityqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
503Service Unavailable-

GET /api/assurance/cases/{caseId}

Read a fixture-backed advanced assurance case summary

PropertyValue
Operation IDGetAdvancedAssuranceCaseSummary
TagsAssurance Cases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
caseIdpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
403Forbiddenapplication/json
404Not Foundapplication/json
409Conflictapplication/json
503Service Unavailableapplication/json

GET /api/assurance/cases/{caseId}/scenarios/{scenarioId}/{transactionPath}

Read a fixture-backed advanced assurance scenario transaction result

PropertyValue
Operation IDGetAdvancedAssuranceScenarioTransaction
TagsAssurance Cases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
caseIdpathyes
scenarioIdpathyes
transactionPathpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
403Forbiddenapplication/json
404Not Foundapplication/json
409Conflictapplication/json
422Unprocessable Entityapplication/json
503Service Unavailableapplication/json

POST /api/assurance/cases/{caseId}/scenarios/{scenarioId}/{transactionPath}

Read a fixture-backed advanced assurance scenario transaction result

PropertyValue
Operation IDGetAdvancedAssuranceScenarioTransaction
TagsAssurance Cases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
caseIdpathyes
scenarioIdpathyes
transactionPathpathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
403Forbiddenapplication/json
404Not Foundapplication/json
409Conflictapplication/json
422Unprocessable Entityapplication/json
503Service Unavailableapplication/json

GET /api/console/runs/{runId}/first-signal

PropertyValue
Operation IDConsoleStatus.FirstSignal
TagsConsole Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/console/status

PropertyValue
Operation IDConsoleStatus.Get
TagsConsole Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/qa/fixtures/advanced-assurance-golden

Read back the configured advanced-assurance golden QA fixture seed artifacts

PropertyValue
Operation IDGetAdvancedAssuranceGoldenFixtureReadback
TagsQA Fixtures
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json
403Forbiddenapplication/json
404Not Foundapplication/json
409Conflictapplication/json
503Service Unavailableapplication/json

GET /api/telemetry/nis2/effectiveness

Get tenant-scoped NIS2 effectiveness KPI dashboard data

Returns the live NIS2 thirteen-area effectiveness dashboard contract from Telemetry Core KPI samples.

PropertyValue
Operation IDGetNis2EffectivenessTelemetry
TagsNIS2 Telemetry
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
TenantIdqueryno
Windowqueryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-

GET /api/v1/admin/crypto-providers/catalog

List crypto provider catalog entries

Returns all rows in platform.crypto_provider_catalog ordered by provider_id. Each row carries display name, health endpoint, advertised algorithms, production-ready / test-only flags, and the linked plug-in id.

PropertyValue
Operation IDListCryptoProviderCatalog
TagsCryptoProviders
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto-providers/catalog

Register a new crypto provider catalog entry

PropertyValue
Operation IDCreateCryptoProviderCatalogEntry
TagsCryptoProviders
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto-providers/catalog/{providerId}

Get a crypto provider catalog entry by id

PropertyValue
Operation IDGetCryptoProviderCatalogEntry
TagsCryptoProviders
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
providerIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/admin/crypto-providers/catalog/{providerId}

Update a crypto provider catalog entry

PropertyValue
Operation IDUpdateCryptoProviderCatalogEntry
TagsCryptoProviders
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
providerIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/admin/crypto-providers/catalog/{providerId}

Delete a crypto provider catalog entry

Refuses (409) when an active tenant_crypto_preferences row still references the provider id.

PropertyValue
Operation IDDeleteCryptoProviderCatalogEntry
TagsCryptoProviders
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
providerIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto-providers/compliance-overrides

Get effective tenant compliance pack overrides

Returns the effective NIS2 / DORA / CRA Product Security / CRA Technical Documentation pack state for the tenant after resolving nullable tenant overrides over installation defaults from platform.environment_settings.

PropertyValue
Operation IDGetTenantComplianceOverrides
TagsCryptoProviders
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/admin/crypto-providers/compliance-overrides/{packId}

Set one tenant compliance pack override

Sets an explicit tenant override for one compliance pack. The response includes before/after override values and the merged effective configuration.

PropertyValue
Operation IDSetTenantCompliancePackOverride
TagsCryptoProviders
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
packIdpathyes
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/admin/crypto-providers/compliance-overrides/{packId}

Clear one tenant compliance pack override

Clears the explicit tenant override for one compliance pack so resolution falls back to the installation default.

PropertyValue
Operation IDDeleteTenantCompliancePackOverride
TagsCryptoProviders
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
packIdpathyes
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto-providers/compliance-profile

Get the active compliance profile for the current tenant

PropertyValue
Operation IDGetTenantComplianceProfile
TagsCryptoProviders
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/admin/crypto-providers/compliance-profile

Set the active compliance profile for the current tenant

Sets the active Cryptography:Compliance:Profile for the current tenant. Valid values: world | fips | gost | sm | kcmvp | eidas. Persists to platform.tenant_compliance_profile and emits platform.update_compliance_profile (the Audited filter records before/after via the previous_profile column).

PropertyValue
Operation IDSetTenantComplianceProfile
TagsCryptoProviders
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto-providers/compliance-profile/operator-signing-enrollment

Get the tenant-bound operator signing-key enrollment policy

Returns the canonical decision-signing algorithm and exact provider identity derived from the active tenant compliance profile and provider preference. It indicates whether browser WebCrypto enrollment is supported and never returns private key material, provider health, or broad crypto-provider configuration.

PropertyValue
Operation IDGetOperatorSigningEnrollmentPolicy
TagsCryptoProviders
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

GET /api/v1/admin/crypto-providers/health

Probe crypto provider route health

Probes each known crypto provider health endpoint and returns aggregated route status, including provider id, advertised algorithms, simulator flags, and drift reasons. Unreachable providers return ‘unreachable’ status, not an error.

PropertyValue
Operation IDGetCryptoProviderHealth
TagsCryptoProviders
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto-providers/preferences

List tenant crypto provider preferences

Returns all crypto provider preferences for the current tenant, ordered by priority.

PropertyValue
Operation IDGetCryptoProviderPreferences
TagsCryptoProviders
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/admin/crypto-providers/preferences

Create or update a crypto provider preference

Upserts a tenant crypto provider preference. The unique key is (tenantId, providerId, algorithmScope).

PropertyValue
Operation IDUpsertCryptoProviderPreference
TagsCryptoProviders
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/admin/crypto-providers/preferences/{id}

Delete a crypto provider preference

Removes a single crypto provider preference by ID. Tenant-isolated.

PropertyValue
Operation IDDeleteCryptoProviderPreference
TagsCryptoProviders
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/kek/blob-populations

Aggregate ciphertext row counts per (kek_id, version) across all stores

PropertyValue
Operation IDGetKekBlobPopulations
TagsCryptoKek
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdqueryyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/kek/{kekId}/history

Reverse-chrono lifecycle history with explicit semantics for Platform-walker entries

PropertyValue
Operation IDGetKekHistory
TagsCryptoKek
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/kek/{kekId}/rotate

Begin a current-material version re-seal across all stores; does not change KEK material or source

PropertyValue
Operation IDBeginKekRotation
TagsCryptoKek
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/kek/{kekId}/rotation-plan

Dry-run current-material re-seal plan; reports populations + proposed version, does not mutate

PropertyValue
Operation IDGetKekRotationPlan
TagsCryptoKek
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/kek/{kekId}/rotation/{rotationId}/abort

Abort an in-flight KEK rotation across all stores

PropertyValue
Operation IDAbortKekRotation
TagsCryptoKek
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdpathyes
rotationIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/kek/{kekId}/rotation/{rotationId}/progress

Aggregate per-store progress with explicit current-material re-seal semantics

PropertyValue
Operation IDGetKekRotationProgress
TagsCryptoKek
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdpathyes
rotationIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/kek/{kekId}/status

Current KEK lifecycle ledger, populations, and wired rotation semantics for one kek_id

PropertyValue
Operation IDGetKekStatus
TagsCryptoKek
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
kekIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/profile/validate

Validate the active crypto profile (plugin reachable / FIPS-mode disagreement / round-trip)

PropertyValue
Operation IDValidateCryptoProfile
TagsCryptoKek
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/secret-providers

PropertyValue
Operation IDListSecretProviders
TagsSecret Providers
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/secret-providers

PropertyValue
Operation IDAddSecretProvider
TagsSecret Providers
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/admin/crypto/secret-providers/{id}

PropertyValue
Operation IDDeleteSecretProvider
TagsSecret Providers
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/secret-providers/{id}/fields

PropertyValue
Operation IDListSecretProviderFields
TagsSecret Providers
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
pathqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/secret-providers/{id}/fields/delete

PropertyValue
Operation IDDeleteSecretProviderField
TagsSecret Providers
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/secret-providers/{id}/fields/reveal

PropertyValue
Operation IDRevealSecretProviderField
TagsSecret Providers
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/secret-providers/{id}/fields/set

PropertyValue
Operation IDSetSecretProviderField
TagsSecret Providers
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/crypto/secret-providers/{id}/paths

PropertyValue
Operation IDListSecretProviderPaths
TagsSecret Providers
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
pageTokenqueryno
prefixqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/secret-providers/{id}/revoke

PropertyValue
Operation IDRevokeSecretProviderSecret
TagsSecret Providers
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/secret-providers/{id}/rotate

PropertyValue
Operation IDRotateSecretProviderSecret
TagsSecret Providers
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/crypto/secret-providers/{id}/seal

PropertyValue
Operation IDSealSecretProviderSecret
TagsSecret Providers
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/migrations/modules

PropertyValue
Operation IDGetMigrationModules
TagsAdmin - Migrations
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /api/v1/admin/migrations/run

PropertyValue
Operation IDRunMigrations
TagsAdmin - Migrations
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Requestapplication/json
500Internal Server Errorapplication/json
503Service Unavailableapplication/json

GET /api/v1/admin/migrations/status

PropertyValue
Operation IDGetMigrationStatus
TagsAdmin - Migrations
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
modulequeryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Requestapplication/json
500Internal Server Errorapplication/json
503Service Unavailableapplication/json

GET /api/v1/admin/migrations/verify

PropertyValue
Operation IDVerifyMigrations
TagsAdmin - Migrations
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
modulequeryno

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Requestapplication/json
500Internal Server Errorapplication/json
503Service Unavailableapplication/json

POST /api/v1/admin/seed-demo

Seed all databases with demo data

PropertyValue
Operation IDSeedDemo
TagsAdmin - Demo Seed
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Requestapplication/json
403Forbiddenapplication/json
500Internal Server Errorapplication/json
503Service Unavailableapplication/json

POST /api/v1/admin/setup/crypto/master-key/generate

PropertyValue
Operation IDGenerateSetupMasterKey
TagsSetup Master Key
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/setup/crypto/master-key/import

PropertyValue
Operation IDImportSetupMasterKey
TagsSetup Master Key
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/setup/crypto/master-key/probe

PropertyValue
Operation IDProbeSetupMasterKey
TagsSetup Master Key
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/setup/crypto/secret-provider/status

PropertyValue
Operation IDGetSetupSecretProviderStatus
TagsSetup Secret Provider
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/setup/crypto/secret-provider/status

PropertyValue
Operation IDPostSetupSecretProviderStatus
TagsSetup Secret Provider
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/admin/setup/crypto/secret-provider/validate

PropertyValue
Operation IDGetSetupSecretProviderValidate
TagsSetup Secret Provider
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/admin/setup/crypto/secret-provider/validate

PropertyValue
Operation IDPostSetupSecretProviderValidate
TagsSetup Secret Provider
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/identity-access

Pack v2 administration A1 identity and access projection.

PropertyValue
Operation IDGetAdministrationIdentityAccess
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/notifications

Pack v2 administration A3 notifications projection.

PropertyValue
Operation IDGetAdministrationNotifications
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/policy-governance

Pack v2 administration A5 policy governance projection.

PropertyValue
Operation IDGetAdministrationPolicyGovernance
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/summary

Pack v2 administration overview cards.

PropertyValue
Operation IDGetAdministrationSummary
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/system

Pack v2 administration A7 system projection.

PropertyValue
Operation IDGetAdministrationSystem
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/tenant-branding

Pack v2 administration A2 tenant and branding projection.

PropertyValue
Operation IDGetAdministrationTenantBranding
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/trust-signing

Pack v2 administration A6 trust and signing projection.

PropertyValue
Operation IDGetAdministrationTrustSigning
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/trust-signing/certificates

List trust certificates

PropertyValue
Operation IDListAdministrationTrustCertificates
TagsAdministration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
limitqueryno
offsetqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/certificates

Register trust certificate

PropertyValue
Operation IDRegisterAdministrationTrustCertificate
TagsAdministration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/certificates/{certificateId}/revoke

Revoke trust certificate

PropertyValue
Operation IDRevokeAdministrationTrustCertificate
TagsAdministration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
certificateIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/trust-signing/issuers

List trust issuers

PropertyValue
Operation IDListAdministrationTrustIssuers
TagsAdministration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
limitqueryno
offsetqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/issuers

Register trust issuer

PropertyValue
Operation IDRegisterAdministrationTrustIssuer
TagsAdministration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/issuers/{issuerId}/block

Block trust issuer

PropertyValue
Operation IDBlockAdministrationTrustIssuer
TagsAdministration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
issuerIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/issuers/{issuerId}/unblock

Unblock trust issuer

PropertyValue
Operation IDUnblockAdministrationTrustIssuer
TagsAdministration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
issuerIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/trust-signing/keys

List trust signing keys

PropertyValue
Operation IDListAdministrationTrustKeys
TagsAdministration
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
limitqueryno
offsetqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/keys

Create trust signing key

PropertyValue
Operation IDCreateAdministrationTrustKey
TagsAdministration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/keys/{keyId}/revoke

Revoke trust signing key

PropertyValue
Operation IDRevokeAdministrationTrustKey
TagsAdministration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
keyIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/administration/trust-signing/keys/{keyId}/rotate

Rotate trust signing key

PropertyValue
Operation IDRotateAdministrationTrustKey
TagsAdministration
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
keyIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/trust-signing/transparency-log

Get trust transparency log configuration

PropertyValue
Operation IDGetAdministrationTrustTransparencyLog
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/administration/trust-signing/transparency-log

Configure trust transparency log

PropertyValue
Operation IDConfigureAdministrationTrustTransparencyLog
TagsAdministration
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/administration/usage-limits

Pack v2 administration A4 usage and limits projection.

PropertyValue
Operation IDGetAdministrationUsageLimits
TagsAdministration
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/aoc/compliance/dashboard

PropertyValue
Operation IDAocCompatibility.GetComplianceDashboard
TagsAOC Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/aoc/compliance/reports

PropertyValue
Operation IDAocCompatibility.GenerateComplianceReport
TagsAOC Compatibility
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/aoc/compliance/violations

PropertyValue
Operation IDAocCompatibility.GetViolations
TagsAOC Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
pagequeryno
pageSizequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/aoc/compliance/violations/{violationId}/retry

PropertyValue
Operation IDAocCompatibility.RetryViolation
TagsAOC Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
violationIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/aoc/ingestion/flow

PropertyValue
Operation IDAocCompatibility.GetIngestionFlow
TagsAOC Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/aoc/metrics

PropertyValue
Operation IDAocCompatibility.GetMetrics
TagsAOC Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdqueryno
windowMinutesqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/aoc/provenance/validate

PropertyValue
Operation IDAocCompatibility.ValidateProvenance
TagsAOC Compatibility
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/aoc/verify

PropertyValue
Operation IDAocCompatibility.Verify
TagsAOC Compatibility
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas

PropertyValue
Operation IDQuotaCompatibility.GetEntitlement
TagsQuota Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/alerts

PropertyValue
Operation IDQuotaCompatibility.GetAlertConfig
TagsQuota Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/authority/quotas/alerts

PropertyValue
Operation IDQuotaCompatibility.SaveAlertConfig
TagsQuota Compatibility
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/consumption

PropertyValue
Operation IDQuotaCompatibility.GetConsumption
TagsQuota Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/dashboard

PropertyValue
Operation IDQuotaCompatibility.GetDashboard
TagsQuota Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/forecast

PropertyValue
Operation IDQuotaCompatibility.GetForecast
TagsQuota Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
categoryqueryno
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/history

PropertyValue
Operation IDQuotaCompatibility.GetHistory
TagsQuota Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
aggregationqueryyes
categoriesqueryno
endDatequeryno
startDatequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/authority/quotas/reports

PropertyValue
Operation IDQuotaCompatibility.RequestReport
TagsQuota Compatibility
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/reports/{reportId}

PropertyValue
Operation IDQuotaCompatibility.GetReportStatus
TagsQuota Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
reportIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/tenants

PropertyValue
Operation IDQuotaCompatibility.GetTenantQuotas
TagsQuota Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
limitqueryyes
offsetqueryyes
searchqueryno
sortByqueryno
sortDirqueryyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/authority/quotas/tenants/{tenantId}

PropertyValue
Operation IDQuotaCompatibility.GetTenantBreakdown
TagsQuota Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/buildinfo

API alias for /buildinfo.json (same payload).

PropertyValue
Operation IDStellaOpsBuildInfoApi
TagsStellaOps.Platform.WebService
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/connector-credentials

List connector credentials for the current tenant (metadata only).

PropertyValue
Operation IDListConnectorCredentials
TagsConnectorCredentials
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
connectorIdqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/connector-credentials

Create a new connector credential (send-only).

PropertyValue
Operation IDCreateConnectorCredential
TagsConnectorCredentials
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/connector-credentials/resolve

Connector runtime resolution (returns plaintext for the calling tenant).

PropertyValue
Operation IDResolveConnectorCredential
TagsConnectorCredentials
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/connector-credentials/{id}

PropertyValue
Operation IDGetConnectorCredential
TagsConnectorCredentials
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/connector-credentials/{id}

PropertyValue
Operation IDRevokeConnectorCredential
TagsConnectorCredentials
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/connector-credentials/{id}/rotate

PropertyValue
Operation IDRotateConnectorCredential
TagsConnectorCredentials
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/connector-credentials/{id}/verify

Confirm a credential decrypts and is in a resolvable state (no vendor-API call).

PropertyValue
Operation IDVerifyConnectorCredential
TagsConnectorCredentials
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/connectors/catalog

Static catalog of connectors offered by the Console credentials UI.

PropertyValue
Operation IDGetConnectorsCatalog
TagsConnectorsCatalog
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/context/regions

Legacy alias for v2 context regions

PropertyValue
Operation IDGetPlatformContextRegionsV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/dashboard/summary

Pack v2 dashboard summary projection.

PropertyValue
Operation IDGetDashboardSummary
TagsDashboard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/gateway/rate-limits

PropertyValue
Operation IDQuotaCompatibility.GetRateLimitStatus
TagsQuota Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/gateway/rate-limits/violations

PropertyValue
Operation IDQuotaCompatibility.GetRateLimitViolations
TagsQuota Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
endDatequeryno
limitqueryyes
startDatequeryno
tenantIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/integrations/feeds

Legacy alias for v2 integrations feed projection

PropertyValue
Operation IDListIntegrationFeedsV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno
SourceTypequeryno
Statusqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/integrations/vex-sources

Legacy alias for v2 integrations VEX source projection

PropertyValue
Operation IDListIntegrationVexSourcesV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno
SourceTypequeryno
Statusqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/quotas

PropertyValue
Operation IDQuotaCompatibility.GetJobQuotaStatus
TagsQuota Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/jobengine/quotas/summary

PropertyValue
Operation IDQuotaCompatibility.GetJobQuotaSummary
TagsQuota Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/notify/digest-schedules

PropertyValue
Operation IDNotifyCompat.ListDigestSchedules
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
pageSizequeryno
pageTokenqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/notify/digest-schedules

PropertyValue
Operation IDNotifyCompat.SaveDigestSchedule
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/notify/digest-schedules/{scheduleId}

PropertyValue
Operation IDNotifyCompat.DeleteDigestSchedule
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
scheduleIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/notify/escalation-policies

PropertyValue
Operation IDNotifyCompat.ListEscalationPolicies
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/notify/escalation-policies

PropertyValue
Operation IDNotifyCompat.SaveEscalationPolicy
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/notify/escalation-policies/{policyId}

PropertyValue
Operation IDNotifyCompat.DeleteEscalationPolicy
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
policyIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/notify/incidents

PropertyValue
Operation IDNotifyCompat.ListIncidents
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/notify/incidents/{incidentId}

PropertyValue
Operation IDNotifyCompat.GetIncident
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
incidentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/notify/incidents/{incidentId}/ack

PropertyValue
Operation IDNotifyCompat.AckIncident
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
incidentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/notify/localizations

PropertyValue
Operation IDNotifyCompat.ListLocalizations
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/notify/localizations

PropertyValue
Operation IDNotifyCompat.SaveLocalization
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/notify/localizations/{localeId}

PropertyValue
Operation IDNotifyCompat.DeleteLocalization
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localeIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/notify/quiet-hours

PropertyValue
Operation IDNotifyCompat.ListQuietHours
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/notify/quiet-hours

PropertyValue
Operation IDNotifyCompat.SaveQuietHours
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/notify/quiet-hours/{quietHoursId}

PropertyValue
Operation IDNotifyCompat.DeleteQuietHours
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
quietHoursIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/notify/simulate

PropertyValue
Operation IDNotifyCompat.Simulate
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/notify/throttle-configs

PropertyValue
Operation IDNotifyCompat.ListThrottleConfigs
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/notify/throttle-configs

PropertyValue
Operation IDNotifyCompat.SaveThrottleConfig
TagsNotify Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/notify/throttle-configs/{throttleId}

PropertyValue
Operation IDNotifyCompat.DeleteThrottleConfig
TagsNotify Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
throttleIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/operator/sar/{actorRef}

Get a tenant-scoped subject access request bundle

PropertyValue
Operation IDGetSubjectAccessRequestBundle
TagsSubject Access Requests
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
actorRefpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/operator/sar/{actorRef}/erase

Execute a GDPR Art. 17 erasure for a tenant-scoped actor

PropertyValue
Operation IDEraseSubjectAccessActor
TagsSubject Access Requests
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
actorRefpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/actor-identity/{actorRef}

Project a tenant-scoped actor reference to its redaction-aware identity

PropertyValue
Operation IDGetActorIdentityProjection
TagsActor Identity
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
actorRefpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/dashboard/profiles

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/platform/dashboard/profiles

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/dashboard/profiles/{profileId}

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
profileIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/data-integrity/report

Pack v2 nightly data-integrity report projection.

PropertyValue
Operation IDGetDataIntegrityReport
TagsPlatform Ops
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/data-integrity/summary

Pack v2 data-integrity card summary.

PropertyValue
Operation IDGetDataIntegritySummary
TagsPlatform Ops
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/feeds/freshness

Pack v2 advisory/feed freshness projection.

PropertyValue
Operation IDGetFeedsFreshness
TagsPlatform Ops
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/health/dependencies

PropertyValue
Operation ID-
TagsPlatform Health
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/health/incidents

PropertyValue
Operation ID-
TagsPlatform Health
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/health/metrics

PropertyValue
Operation ID-
TagsPlatform Health
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/health/readiness

PropertyValue
Operation ID-
TagsPlatform Health
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/health/services/{name}

PropertyValue
Operation ID-
TagsPlatform Health
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
namepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/health/summary

PropertyValue
Operation ID-
TagsPlatform Health
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/platform/localization/bundles

Creates or updates translation strings

Upserts translation key-value pairs for a locale. DB values override embedded defaults. Changes take immediate effect in the in-memory registry.

PropertyValue
Operation IDUpsertTranslations
TagsLocalization
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/localization/bundles/{locale}

Gets all translations for a locale

Returns the merged set of all translations for the specified locale, combining embedded defaults with system and tenant DB overrides in priority order.

PropertyValue
Operation IDGetTranslationBundle
TagsLocalization
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/localization/bundles/{locale}/{ns}

Gets translations for a locale filtered by namespace prefix

PropertyValue
Operation IDGetTranslationBundleByNamespace
TagsLocalization
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localepathyes
nspathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/localization/locales

Gets all available locales

PropertyValue
Operation IDGetAvailableLocales
TagsLocalization
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/platform/localization/strings/{locale}/{key}

Deletes a translation override

PropertyValue
Operation IDDeleteTranslation
TagsLocalization
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
keypathyes
localepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/metadata

PropertyValue
Operation ID-
TagsPlatform
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/platform/onboarding/complete/{step}

PropertyValue
Operation ID-
TagsPlatform Onboarding
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
steppathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/platform/onboarding/skip

PropertyValue
Operation ID-
TagsPlatform Onboarding
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/onboarding/status

PropertyValue
Operation ID-
TagsPlatform Onboarding
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/preferences/dashboard

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/platform/preferences/dashboard

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/preferences/email

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/platform/preferences/email

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/preferences/language

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/platform/preferences/language

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/preferences/session

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/platform/preferences/session

PropertyValue
Operation ID-
TagsPlatform Preferences
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/quotas/alerts

PropertyValue
Operation ID-
TagsPlatform Quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/platform/quotas/alerts

PropertyValue
Operation ID-
TagsPlatform Quotas
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/quotas/summary

PropertyValue
Operation ID-
TagsPlatform Quotas
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/quotas/tenants/{tenantId}

PropertyValue
Operation ID-
TagsPlatform Quotas
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/reachability/ingest-health

Pack v2 reachability ingest health projection.

PropertyValue
Operation IDGetReachabilityIngestHealth
TagsPlatform Ops
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/scan-pipeline/health

Pack v2 scan-pipeline health projection.

PropertyValue
Operation IDGetScanPipelineHealth
TagsPlatform Ops
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/search

PropertyValue
Operation ID-
TagsPlatform Search
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Limitqueryno
Offsetqueryno
Sourcesqueryno
qqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/platform/tenants/{tenantId}/setup-status

PropertyValue
Operation ID-
TagsPlatform
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tenantIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registries/images/digests

Get artifact digests for a specific repository

PropertyValue
Operation IDRegistries.GetImageDigests
TagsRegistry Search
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
digestqueryno
repositoryqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/registries/images/search

Search container images across connected registries

PropertyValue
Operation IDRegistries.SearchImages
TagsRegistry Search
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
qqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-control/bundles

List release control bundles

PropertyValue
Operation IDListReleaseControlBundles
TagsRelease Control
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
limitqueryno
offsetqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-control/bundles

Create release control bundle

PropertyValue
Operation IDCreateReleaseControlBundle
TagsRelease Control
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-control/bundles/{bundleId}

Get release control bundle by id

PropertyValue
Operation IDGetReleaseControlBundle
TagsRelease Control
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
bundleIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-control/bundles/{bundleId}/versions

List bundle versions

PropertyValue
Operation IDListReleaseControlBundleVersions
TagsRelease Control
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
bundleIdpathyes
limitqueryno
offsetqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-control/bundles/{bundleId}/versions

Publish immutable bundle version

PropertyValue
Operation IDPublishReleaseControlBundleVersion
TagsRelease Control
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
bundleIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-control/bundles/{bundleId}/versions/{versionId}

Get bundle version

PropertyValue
Operation IDGetReleaseControlBundleVersion
TagsRelease Control
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
bundleIdpathyes
versionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-control/bundles/{bundleId}/versions/{versionId}/materialize

Materialize bundle version

PropertyValue
Operation IDMaterializeReleaseControlBundleVersion
TagsRelease Control
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
bundleIdpathyes
versionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments

List release orchestrator environments

PropertyValue
Operation IDListReleaseOrchestratorEnvironments
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments

Create a release orchestrator environment

PropertyValue
Operation IDCreateReleaseOrchestratorEnvironment
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}

Get a release orchestrator environment

PropertyValue
Operation IDGetReleaseOrchestratorEnvironment
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}

Update a release orchestrator environment

PropertyValue
Operation IDUpdateReleaseOrchestratorEnvironment
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{id}

Delete a release orchestrator environment

PropertyValue
Operation IDDeleteReleaseOrchestratorEnvironment
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/freeze-windows

List environment freeze windows

PropertyValue
Operation IDListReleaseOrchestratorFreezeWindows
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/freeze-windows

Create an environment freeze window

PropertyValue
Operation IDCreateReleaseOrchestratorFreezeWindow
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/freeze-windows/{freezeWindowId}

Update an environment freeze window

PropertyValue
Operation IDUpdateReleaseOrchestratorFreezeWindow
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
freezeWindowIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{id}/freeze-windows/{freezeWindowId}

Delete an environment freeze window

PropertyValue
Operation IDDeleteReleaseOrchestratorFreezeWindow
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
freezeWindowIdpathyes
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/settings

Update environment release settings

PropertyValue
Operation IDUpdateReleaseOrchestratorEnvironmentSettings
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/release-orchestrator/environments/{id}/targets

List environment targets

PropertyValue
Operation IDListReleaseOrchestratorEnvironmentTargets
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/targets

Create an environment target

PropertyValue
Operation IDCreateReleaseOrchestratorEnvironmentTarget
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/release-orchestrator/environments/{id}/targets/{targetId}

Update an environment target

PropertyValue
Operation IDUpdateReleaseOrchestratorEnvironmentTarget
TagsRelease Orchestrator Environments
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/release-orchestrator/environments/{id}/targets/{targetId}

Delete an environment target

PropertyValue
Operation IDDeleteReleaseOrchestratorEnvironmentTarget
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/release-orchestrator/environments/{id}/targets/{targetId}/health-check

Run a target health check

PropertyValue
Operation IDHealthCheckReleaseOrchestratorEnvironmentTarget
TagsRelease Orchestrator Environments
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
targetIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases

Legacy alias for v2 releases projection

PropertyValue
Operation IDListReleasesV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno
Statusqueryno
Typequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs

Legacy alias for v2 run list projection

PropertyValue
Operation IDListReleaseRunsV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
BlockedByDataIntegrityqueryno
Environmentqueryno
Lanequeryno
Limitqueryno
NeedsApprovalqueryno
Offsetqueryno
Outcomequeryno
Regionqueryno
Statusqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}

Legacy alias for v2 run detail projection

PropertyValue
Operation IDGetReleaseRunDetailV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/approvals

Legacy alias for v2 run approvals projection

PropertyValue
Operation IDGetReleaseRunApprovalsV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/audit

Legacy alias for v2 run audit projection

PropertyValue
Operation IDGetReleaseRunAuditV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/deployments

Legacy alias for v2 run deployments projection

PropertyValue
Operation IDGetReleaseRunDeploymentsV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/evidence

Legacy alias for v2 run evidence projection

PropertyValue
Operation IDGetReleaseRunEvidenceV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/gate-decision

Legacy alias for v2 run gate decision projection

PropertyValue
Operation IDGetReleaseRunGateDecisionV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/replay

Legacy alias for v2 run replay projection

PropertyValue
Operation IDGetReleaseRunReplayV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/rollback

Legacy alias for v2 run rollback projection

PropertyValue
Operation IDGetReleaseRunRollbackV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/security-inputs

Legacy alias for v2 run security inputs projection

PropertyValue
Operation IDGetReleaseRunSecurityInputsV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/releases/runs/{runId}/timeline

Legacy alias for v2 run timeline projection

PropertyValue
Operation IDGetReleaseRunTimelineV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/search

PropertyValue
Operation ID-
TagsPlatform Search
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Limitqueryno
Offsetqueryno
Sourcesqueryno
qqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/setup/definitions/steps

PropertyValue
Operation IDGetSetupStepDefinitions
TagsSetup Definitions
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/quick-check

PropertyValue
Operation IDRunSetupQuickCheck
TagsSetup Wizard
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/setup/sessions

PropertyValue
Operation IDGetSetupSession
TagsSetup Sessions
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions

PropertyValue
Operation IDCreateSetupSession
TagsSetup Sessions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/setup/sessions/current

PropertyValue
Operation IDGetCurrentSetupSession
TagsSetup Sessions
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/finalize

PropertyValue
Operation IDFinalizeSetupSession
TagsSetup Sessions
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/resume

PropertyValue
Operation IDResumeSetupSession
TagsSetup Sessions
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/setup/sessions/{sessionId}

PropertyValue
Operation IDGetSetupSessionById
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/setup/sessions/{sessionId}/config

PropertyValue
Operation IDSaveSetupSessionConfig
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/finalize

PropertyValue
Operation IDFinalizeSetupSessionByPath
TagsSetup Sessions
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
sessionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/steps/{stepId}/apply

PropertyValue
Operation IDApplySetupStepByPath
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/setup/sessions/{sessionId}/steps/{stepId}/checks

PropertyValue
Operation IDGetSetupStepChecks
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/steps/{stepId}/checks/run

PropertyValue
Operation IDRunSetupStepChecks
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/steps/{stepId}/execute

PropertyValue
Operation IDExecuteSetupStepByPath
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/steps/{stepId}/prerequisites

PropertyValue
Operation IDCheckSetupStepPrerequisites
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/steps/{stepId}/probe

PropertyValue
Operation IDProbeSetupStepByPath
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/steps/{stepId}/reset

PropertyValue
Operation IDResetSetupStepByPath
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/sessions/{sessionId}/steps/{stepId}/skip

PropertyValue
Operation IDSkipSetupStepByPath
TagsSetup Sessions
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
sessionIdpathyes
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/setup/steps

PropertyValue
Operation IDGetSetupSteps
TagsSetup Steps
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/steps/execute

PropertyValue
Operation IDExecuteSetupStep
TagsSetup Steps
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/steps/skip

PropertyValue
Operation IDSkipSetupStep
TagsSetup Steps
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/setup/steps/{stepId}

PropertyValue
Operation IDGetSetupStep
TagsSetup Steps
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/setup/steps/{stepId}/test-connection

PropertyValue
Operation IDTestStepConnection
TagsSetup Steps
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
stepIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/signals

PropertyValue
Operation IDSignalsCompatibility.List
TagsSignals Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
cursorqueryno
limitqueryno
providerqueryno
statusqueryno
typequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/signals/reachability/call-graphs

PropertyValue
Operation IDSignalsCompatibility.GetCallGraphs
TagsSignals Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
assetIdqueryno
componentqueryno
projectIdqueryno
tenantIdqueryno
traceIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/signals/reachability/facts

PropertyValue
Operation IDSignalsCompatibility.GetReachabilityFacts
TagsSignals Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
assetIdqueryno
componentqueryno
projectIdqueryno
tenantIdqueryno
traceIdqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/signals/stats

PropertyValue
Operation IDSignalsCompatibility.Stats
TagsSignals Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/signals/triggers

PropertyValue
Operation IDSignalsCompatibility.ListTriggers
TagsSignals Compatibility
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/signals/triggers

PropertyValue
Operation IDSignalsCompatibility.CreateTrigger
TagsSignals Compatibility
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/signals/triggers/{id}

PropertyValue
Operation IDSignalsCompatibility.UpdateTrigger
TagsSignals Compatibility
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/signals/triggers/{id}

PropertyValue
Operation IDSignalsCompatibility.DeleteTrigger
TagsSignals Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PATCH /api/v1/signals/triggers/{id}

PropertyValue
Operation IDSignalsCompatibility.ToggleTrigger
TagsSignals Compatibility
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/signals/{id}

PropertyValue
Operation IDSignalsCompatibility.GetDetail
TagsSignals Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/signals/{id}/retry

PropertyValue
Operation IDSignalsCompatibility.Retry
TagsSignals Compatibility
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/stella-assistant/admin/glossary

Create or update a glossary term

PropertyValue
Operation IDUpsertGlossaryTerm
TagsStella Assistant Admin
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/stella-assistant/admin/tips

List all tips for admin editing

PropertyValue
Operation IDListAllAssistantTips
TagsStella Assistant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localequeryno
routequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/stella-assistant/admin/tips

Create or update a tip

PropertyValue
Operation IDUpsertAssistantTip
TagsStella Assistant Admin
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v1/stella-assistant/admin/tips/{tipId}

Deactivate a tip

PropertyValue
Operation IDDeactivateAssistantTip
TagsStella Assistant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tipIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/stella-assistant/admin/tours

List all tours for admin editing

PropertyValue
Operation IDListAllAssistantTours
TagsStella Assistant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localequeryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/stella-assistant/admin/tours

Create or update a guided tour

PropertyValue
Operation IDUpsertAssistantTour
TagsStella Assistant Admin
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/stella-assistant/admin/tours/{tourKey}

Get a single tour by key for editing

PropertyValue
Operation IDGetAssistantTourByKey
TagsStella Assistant Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
tourKeypathyes
localequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/stella-assistant/glossary

Get domain glossary terms for a locale

PropertyValue
Operation IDGetAssistantGlossary
TagsStella Assistant
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localequeryno
termsqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/stella-assistant/tips

Get contextual tips for a route and locale

PropertyValue
Operation IDGetAssistantTips
TagsStella Assistant
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
contextsqueryno
localequeryno
routequeryyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/stella-assistant/tours

Get guided tour definitions

PropertyValue
Operation IDGetAssistantTours
TagsStella Assistant
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localequeryno
tourKeyqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/stella-assistant/user-state

Get user’s assistant preferences and seen routes

PropertyValue
Operation IDGetAssistantUserState
TagsStella Assistant
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v1/stella-assistant/user-state

Persist user’s assistant preferences

PropertyValue
Operation IDUpdateAssistantUserState
TagsStella Assistant
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/telemetry/federation/installation/bundles

List federation telemetry bundles

PropertyValue
Operation IDListFederationBundles
TagsFederated Telemetry
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/telemetry/federation/installation/bundles/{id}

Get federation telemetry bundle detail

PropertyValue
Operation IDGetFederationBundle
TagsFederated Telemetry
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/telemetry/federation/installation/intelligence

Get shared exploit intelligence corpus

PropertyValue
Operation IDGetFederationIntelligence
TagsFederated Telemetry
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/telemetry/federation/installation/privacy-budget

Get privacy budget snapshot

PropertyValue
Operation IDGetFederationPrivacyBudget
TagsFederated Telemetry
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/telemetry/federation/installation/status

Get federation telemetry status

PropertyValue
Operation IDGetFederationStatus
TagsFederated Telemetry
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/telemetry/federation/installation/trigger

Trigger manual federation aggregation cycle

PropertyValue
Operation IDTriggerFederationAggregation
TagsFederated Telemetry
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/telemetry/federation/participation/consent

Get federation consent state for current tenant

PropertyValue
Operation IDGetFederationConsent
TagsFederated Telemetry
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/telemetry/federation/participation/consent/grant

Grant federation telemetry consent

PropertyValue
Operation IDGrantFederationConsent
TagsFederated Telemetry
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/telemetry/federation/participation/consent/revoke

Revoke federation telemetry consent

PropertyValue
Operation IDRevokeFederationConsent
TagsFederated Telemetry
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v1/telemetry/federation/participation/facts

Ingest an authenticated current-tenant federation fact

PropertyValue
Operation IDIngestFederationTelemetryFact
TagsFederated Telemetry
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v1/topology/regions

Legacy alias for v2 topology regions projection

PropertyValue
Operation IDListTopologyRegionsV1Alias
TagsPack22 Legacy Aliases
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/context/environments

List global environments with optional region filter

PropertyValue
Operation IDGetPlatformContextEnvironments
TagsPlatform Context
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
regionsqueryno

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v2/context/environments/{environmentId}

Create or update a global topology context environment

PropertyValue
Operation IDUpsertPlatformContextEnvironment
TagsPlatform Context
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
environmentIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/context/preferences

Get persisted context preferences for the current user

PropertyValue
Operation IDGetPlatformContextPreferences
TagsPlatform Context
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v2/context/preferences

Update persisted context preferences for the current user

PropertyValue
Operation IDUpdatePlatformContextPreferences
TagsPlatform Context
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/context/regions

List global regions for context selection

PropertyValue
Operation IDGetPlatformContextRegions
TagsPlatform Context
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v2/context/regions/{regionId}

Create or update a global topology context region

PropertyValue
Operation IDUpsertPlatformContextRegion
TagsPlatform Context
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
regionIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/evidence/packs

List Pack-22 evidence pack projections

PropertyValue
Operation IDListEvidencePacksV2
TagsEvidence V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/integrations/feeds

List advisory feed health/freshness integration projection

PropertyValue
Operation IDListIntegrationFeedsV2
TagsIntegrations V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno
SourceTypequeryno
Statusqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/integrations/vex-sources

List VEX source health/freshness integration projection

PropertyValue
Operation IDListIntegrationVexSourcesV2
TagsIntegrations V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno
SourceTypequeryno
Statusqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases

List Pack-22 release projections

PropertyValue
Operation IDListReleasesV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno
Statusqueryno
Typequeryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/activity

List cross-release activity timeline

PropertyValue
Operation IDListReleaseActivityV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/approvals

List cross-release approvals queue projection

PropertyValue
Operation IDListReleaseApprovalsV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno
Statusqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs

List run-centric release projections for Pack-22 contracts

PropertyValue
Operation IDListReleaseRunsV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
BlockedByDataIntegrityqueryno
Environmentqueryno
Lanequeryno
Limitqueryno
NeedsApprovalqueryno
Offsetqueryno
Outcomequeryno
Regionqueryno
Statusqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}

Get canonical release run detail projection

PropertyValue
Operation IDGetReleaseRunDetailV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/approvals

Get release run approvals checkpoints projection

PropertyValue
Operation IDGetReleaseRunApprovalsV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/audit

Get release run audit projection

PropertyValue
Operation IDGetReleaseRunAuditV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/deployments

Get release run deployments projection

PropertyValue
Operation IDGetReleaseRunDeploymentsV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/evidence

Get release run evidence capsule projection

PropertyValue
Operation IDGetReleaseRunEvidenceV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/gate-decision

Get release run gate decision projection

PropertyValue
Operation IDGetReleaseRunGateDecisionV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/replay

Get release run replay projection

PropertyValue
Operation IDGetReleaseRunReplayV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/rollback

Get release run rollback projection

PropertyValue
Operation IDGetReleaseRunRollbackV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/security-inputs

Get release run security inputs projection

PropertyValue
Operation IDGetReleaseRunSecurityInputsV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/runs/{runId}/timeline

Get release run timeline projection

PropertyValue
Operation IDGetReleaseRunTimelineV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
runIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/releases/{releaseId}

Get Pack-22 release detail projection

PropertyValue
Operation IDGetReleaseDetailV2
TagsReleases V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
releaseIdpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts

List and search scripts

Lists scripts with optional filtering by language, visibility, and search text.

PropertyValue
Operation IDListScripts
TagsScripts
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
languagequeryno
limitqueryno
offsetqueryno
searchqueryno
visibilityqueryno

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts

Create new script

Creates a new script in the registry with initial content and metadata.

PropertyValue
Operation IDCreateScript
TagsScripts
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts/validate

Validate script without saving

Validates script syntax and returns diagnostics. Used by the editor compile button.

PropertyValue
Operation IDValidateScript
TagsScripts
AuthNot declared
Request bodyapplication/json

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{id}

Get script by id

Retrieves a script including its full content.

PropertyValue
Operation IDGetScript
TagsScripts
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

PUT /api/v2/scripts/{id}

Update script

Updates an existing script. Content changes create a new version automatically.

PropertyValue
Operation IDUpdateScript
TagsScripts
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

DELETE /api/v2/scripts/{id}

Delete script

Deletes a script and all its version history.

PropertyValue
Operation IDDeleteScript
TagsScripts
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

POST /api/v2/scripts/{id}/check-compatibility

Check script deployment compatibility

Checks if a script is compatible with a given deployment target type.

PropertyValue
Operation IDCheckScriptCompatibility
TagsScripts
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{id}/versions

List script version history

Returns the full version history for a script, newest first.

PropertyValue
Operation IDListScriptVersions
TagsScripts
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/scripts/{id}/versions/{version}/content

Get script version content

Retrieves the content of a specific script version for diff comparison.

PropertyValue
Operation IDGetScriptVersionContent
TagsScripts
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
idpathyes
versionpathyes

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/agents

List topology agents

PropertyValue
Operation IDListTopologyAgentsV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/environments

List topology environments

PropertyValue
Operation IDListTopologyEnvironmentsV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/gate-profiles

List topology gate profiles

PropertyValue
Operation IDListTopologyGateProfilesV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/hosts

List topology hosts

PropertyValue
Operation IDListTopologyHostsV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/layout

Get positioned topology layout for SVG rendering

PropertyValue
Operation IDGetTopologyLayoutV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Directionqueryno
Effortqueryno
Environmentqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/promotion-paths

List topology promotion paths

PropertyValue
Operation IDListTopologyPromotionPathsV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/regions

List topology regions

PropertyValue
Operation IDListTopologyRegionsV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/targets

List topology targets

PropertyValue
Operation IDListTopologyTargetsV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /api/v2/topology/workflows

List topology workflows

PropertyValue
Operation IDListTopologyWorkflowsV2
TagsTopology V2
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
Environmentqueryno
Limitqueryno
Offsetqueryno
Regionqueryno

Responses:

StatusDescriptionContent types
200OK-

GET /buildinfo.json

Image build provenance (module, gitSha, gitCommitTime, imageBuiltAt, branch) for drift detection.

PropertyValue
Operation IDStellaOpsBuildInfoFile
TagsStellaOps.Platform.WebService
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health/liveness

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /health/readiness

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /healthz

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-

GET /platform/envsettings.json

Returns frontend environment configuration (AppConfig)

Anonymous endpoint that returns the Angular frontend’s AppConfig payload. The response merges three configuration layers: environment variables (lowest), YAML/JSON config, and database overrides (highest). Includes OIDC authority settings, API base URLs, and optional telemetry/welcome/doctor configuration.

PropertyValue
Operation IDGetEnvironmentSettings
TagsEnvironment Settings
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

GET /platform/envsettings/db

List all DB-layer environment settings

PropertyValue
Operation IDListDbEnvironmentSettings
TagsEnvironment Settings Admin
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OKapplication/json

PUT /platform/envsettings/db/{key}

Create or update a DB-layer environment setting

PropertyValue
Operation IDUpsertDbEnvironmentSetting
TagsEnvironment Settings Admin
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
keypathyes

Responses:

StatusDescriptionContent types
200OK-
400Bad Request-

DELETE /platform/envsettings/db/{key}

Delete a DB-layer environment setting

PropertyValue
Operation IDDeleteDbEnvironmentSetting
TagsEnvironment Settings Admin
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
keypathyes

Responses:

StatusDescriptionContent types
204No Content-
400Bad Request-

GET /platform/i18n/{locale}.json

Gets the merged translation bundle for the UI

Returns all translations for the specified locale, merging embedded defaults with DB overrides. Anonymous access, cacheable. Used by the Angular frontend at boot time.

PropertyValue
Operation IDGetUiTranslationBundle
TagsLocalization
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
localepathyes

Responses:

StatusDescriptionContent types
200OK-

GET /platform/verification-keys/{profile}

List versioned verification roots for a region profile

PropertyValue
Operation IDListVerificationRoots
TagsVerification Key Rotation
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
profilepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json

POST /platform/verification-keys/{profile}/introduce

Introduce a new verification root (begins dual-trust grace; consequences-gated)

PropertyValue
Operation IDIntroduceVerificationRoot
TagsVerification Key Rotation
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
profilepathyes

Responses:

StatusDescriptionContent types
201Createdapplication/json
400Bad Request-
422Unprocessable Entity-

POST /platform/verification-keys/{profile}/invalidate

Invalidate the old verification root (archive verify-only or revoke; consequences-gated)

PropertyValue
Operation IDInvalidateVerificationRoot
TagsVerification Key Rotation
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
profilepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
422Unprocessable Entity-

GET /platform/verification-keys/{profile}/signing-root/jwks-set

Serve the signing-root JWKS set (active+retiring+archived) to EvidenceLocker/Attestor boot pull

PropertyValue
Operation IDGetSigningRootJwksSet
TagsVerification Key Rotation
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
profilepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
401Unauthorized-

GET /platform/verification-keys/{profile}/vex-hmac-trust-root/sealed-secrets

Serve sealed VexHub HMAC trust-root secrets to the VexHub boot pull (service-token authenticated)

PropertyValue
Operation IDGetVexHmacTrustRootSealedSecrets
TagsVerification Key Rotation
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
profilepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
401Unauthorized-
503Service Unavailable-

GET /platform/verification-keys/{profile}/{materialType}/reenvelope-status

Read aggregated re-envelope progress for a material type

PropertyValue
Operation IDGetVerificationReEnvelopeStatus
TagsVerification Key Rotation
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
materialTypepathyes
profilepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

POST /platform/verification-keys/{profile}/{materialType}/reenvelope-status

Ingest re-envelope progress from a downstream job (service-token authenticated)

PropertyValue
Operation IDReportVerificationReEnvelopeStatus
TagsVerification Key Rotation
AuthNot declared
Request bodyapplication/json

Parameters:

NameInRequiredDescription
materialTypepathyes
profilepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
400Bad Request-
401Unauthorized-

GET /platform/verification-keys/{profile}/{materialType}/{keyId}

Get a single verification root by material type and key id

PropertyValue
Operation IDGetVerificationRoot
TagsVerification Key Rotation
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
keyIdpathyes
materialTypepathyes
profilepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
404Not Found-

GET /platform/verification-settings/{service}

Resolve region-scoped signature-verification config for a service

Returns the admin-entered signature-verification keys/trust-roots for the requested service, resolved for the active compliance profile (query parameter ‘profile’), as flat service-local configuration keys. Consumed by a service’s startup configuration source, NOT the frontend. Authenticated with the shared internal token header, falling back to the SetupRead scope.

PropertyValue
Operation IDGetVerificationSettings
TagsVerification Settings
AuthNot declared
Request body-

Parameters:

NameInRequiredDescription
servicepathyes

Responses:

StatusDescriptionContent types
200OKapplication/json
401Unauthorized-

GET /readyz

PropertyValue
Operation ID-
TagsHealth
AuthNot declared
Request body-

Responses:

StatusDescriptionContent types
200OK-