BrainstormRouter

Autonomous AI API engine. Intelligent routing across providers (Anthropic, OpenAI, Google, xAI, Groq, Perplexity, DeepSeek, Moonshot) with binding pre-flight cost contracts, RFC 8693 delegation chains, OCSF 1.3.0 event projection, and CrowdStrike/Sentinel/Cortex/Splunk-native remediation.

Skills

• List agents with active behavior certificates
  List agents with active behavior certificates
  security
• Fetch an agent's behavior certificate (404 on missing)
  Fetch an agent's behavior certificate (404 on missing)
  security
• Issue a behavior certificate to an agent (201)
  Issue a behavior certificate to an agent (201)
  security
• Revoke an agent's behavior certificate (404 on missing)
  Revoke an agent's behavior certificate (404 on missing)
  security
• Discover agents in the tenant with their behavior-certificate capabilities
  Discover agents in the tenant with their behavior-certificate capabilities
  security
• Send a message between agents; verifies behavior certificate + send_message capability
  Send a message between agents; verifies behavior certificate + send_message capability
  security
• Get tenant profile with user count
  Get tenant profile with user count
  system
• Graduate a sandbox tenant to standard tier via a verified provider key (BYOK)
  Graduate a sandbox tenant to standard tier via a verified provider key (BYOK)
  system
• Graduation criteria + live progress for a sandbox tenant (machine-readable)
  Graduation criteria + live progress for a sandbox tenant (machine-readable)
  system
• Confirm the code — promote sandbox tenant to standard tier ($5/day)
  Confirm the code — promote sandbox tenant to standard tier ($5/day)
  system
• Send a verification code to upgrade a sandbox tenant to standard tier
  Send a verification code to upgrade a sandbox tenant to standard tier
  system
• Business summary digest
  Business summary digest
  systemadmin
• Create an invite code
  Create an invite code
  systemadmin
• Revoke an invite code
  Revoke an invite code
  systemadmin
• List invite codes with usage counts
  List invite codes with usage counts
  systemadmin
• Approve a tenant (sets status → active)
  Approve a tenant (sets status → active)
  systemadmin
• Get tenant detail
  Get tenant detail
  systemadmin
• List tenants with optional status filter (platform admin only)
  List tenants with optional status filter (platform admin only)
  systemadmin
• Reject a tenant (sets status → rejected)
  Reject a tenant (sets status → rejected)
  systemadmin
• Set per-tenant aggregate rate limit (API-key variant; admin auth via path middleware)
  Set per-tenant aggregate rate limit (API-key variant; admin auth via path middleware)
  systemadmin
• Set a tenant's billing plan (platform operator only; supports ?dry_run=true)
  Set a tenant's billing plan (platform operator only; supports ?dry_run=true)
  systemadmin
• Suspend a tenant (sets status → suspended)
  Suspend a tenant (sets status → suspended)
  systemadmin
• Clear an XDR risk score (risk resolved)
  Clear an XDR risk score (risk resolved)
  systemadmin
• Push an XDR risk score for an agent (gated by XDR_BIDIRECTIONAL_ENABLED)
  Push an XDR risk score for an agent (gated by XDR_BIDIRECTIONAL_ENABLED)
  systemadmin
• Exchange agent JWT + CSR for a signed mTLS client certificate
  Exchange agent JWT + CSR for a signed mTLS client certificate
  security
• Revoke an agent certificate (single by serial, or bulk per tenant)
  Revoke an agent certificate (single by serial, or bulk per tenant)
  security
• Parent agent creates a child agent with sliced budget (agent-JWT only)
  Parent agent creates a child agent with sliced budget (agent-JWT only)
  security
• Recent security events for the calling agent
  Recent security events for the calling agent
  agents
• Zero-human agent onboarding — profile + enforced limits + JWT
  Zero-human agent onboarding — profile + enforced limits + JWT
  agents
• Federated agent bootstrap — external IDP JWT → BR session JWT
  Federated agent bootstrap — external IDP JWT → BR session JWT
  security
• Budget + rate-limit state for the calling agent
  Budget + rate-limit state for the calling agent
  agents
• Full self-awareness: profile, limits, anomaly, governance
  Full self-awareness: profile, limits, anomaly, governance
  agents
• Archive (soft-delete) an agent profile
  Archive (soft-delete) an agent profile
  security
• Create a new agent profile (admin/operator)
  Create a new agent profile (admin/operator)
  security
• Return the parent/child delegation graph for an agent
  Return the parent/child delegation graph for an agent
  security
• Read a single agent profile by id
  Read a single agent profile by id
  security
• Transition an agent profile to a target lifecycle state
  Transition an agent profile to a target lifecycle state
  security
• List all agent profiles for the tenant
  List all agent profiles for the tenant
  security
• Self-read agent profile (uses _agentIdentity)
  Self-read agent profile (uses _agentIdentity)
  security
• Update an agent profile (admin/operator)
  Update an agent profile (admin/operator)
  security
• Return up to 10 historical snapshots of an agent profile
  Return up to 10 historical snapshots of an agent profile
  security
• List sub-agents (children) of the calling agent
  List sub-agents (children) of the calling agent
  security
• Terminate a sub-agent and reclaim its budget (caller must be parent)
  Terminate a sub-agent and reclaim its budget (caller must be parent)
  security
• Update tenant profile (currently: name)
  Update tenant profile (currently: name)
  system
• Invite a user by email; returns claim URL (201)
  Invite a user by email; returns claim URL (201)
  system
• List users in the current tenant (RLS-scoped)
  List users in the current tenant (RLS-scoped)
  system
• Remove a user from the current tenant
  Remove a user from the current tenant
  system
• Canonical tenant-context resolver: {workspace, products, entitlements, residency, members}. v0.4 P2 M24.
  Canonical tenant-context resolver: {workspace, products, entitlements, residency, members}. v0.4 P2 M24.
  systemtenantplatform
• List operator-facing god-mode capabilities from the platform operator-capability registry (v0.5 M00a SoR). Used by the HAI chat dispatcher + capability browser.
  List operator-facing god-mode capabilities from the platform operator-capability registry (v0.5 M00a SoR). Used by the HAI chat dispatcher + capability browser.
  systemregistryplatformoperator
• Read the per-agent limits map for the current tenant
  Read the per-agent limits map for the current tenant
  system
• Merge updates into the per-agent limits map (null value deletes an entry)
  Merge updates into the per-agent limits map (null value deletes an entry)
  system
• Replace the entire per-agent limits map (canonicalizes keys to `agent:<id>`)
  Replace the entire per-agent limits map (canonicalizes keys to `agent:<id>`)
  system
• Read the model alias map for the current tenant
  Read the model alias map for the current tenant
  system
• Merge alias updates (null value deletes a key)
  Merge alias updates (null value deletes a key)
  system
• Replace the entire model alias map (rejects null values; use PATCH to delete)
  Replace the entire model alias map (rejects null values; use PATCH to delete)
  system
• Build attestation bundle (commit, image digest, signer, Rekor URL, verify command)
  Build attestation bundle (commit, image digest, signer, Rekor URL, verify command)
  security
• Slack interactive webhook handler (HMAC-verified, rate-limited)
  Slack interactive webhook handler (HMAC-verified, rate-limited)
  webhooks
• Search audit events (filterable by actor/action/resource/date range)
  Search audit events (filterable by actor/action/resource/date range)
  security
• Export audit events as CSV / JSON / CEF (raw Response with content-type)
  Export audit events as CSV / JSON / CEF (raw Response with content-type)
  security
• Get current audit retention policy (days)
  Get current audit retention policy (days)
  security
• Set audit retention policy (allowed: 7, 30, 90, 365, 1095, 2555 days)
  Set audit retention policy (allowed: 7, 30, 90, 365, 1095, 2555 days)
  security
• Verify hash-chain integrity for the current tenant's audit trail
  Verify hash-chain integrity for the current tenant's audit trail
  security
• Current tenant plan + usage vs limits
  Current tenant plan + usage vs limits
  system
• Switch the tenant's billing plan (platform operator only; tenants get 403 contact_support)
  Switch the tenant's billing plan (platform operator only; tenants get 403 contact_support)
  system
• List available billing plans
  List available billing plans
  system
• Set budget configuration for a specific agent
  Set budget configuration for a specific agent
  systembudget
• List per-agent budget configurations and current status
  List per-agent budget configurations and current status
  systembudget
• Get current budget alert configuration
  Get current budget alert configuration
  systembudget
• Update budget alert configuration (thresholds, webhook, enabled)
  Update budget alert configuration (thresholds, webhook, enabled)
  systembudget
• Recent budget alert events for the tenant
  Recent budget alert events for the tenant
  systembudget
• Spend forecast, projected depletion date, anomaly detection
  Spend forecast, projected depletion date, anomaly detection
  systembudget
• Update tenant-level daily and monthly budget limits
  Update tenant-level daily and monthly budget limits
  systembudget
• Alias of /v1/budget/status served at the bare /v1/budget path
  Alias of /v1/budget/status served at the bare /v1/budget path
  systembudget
• Current tenant + key spend against daily/monthly limits
  Current tenant + key spend against daily/monthly limits
  systembudget
• Predict rate-limit exhaustion + budget burn per provider (DB-backed forecast)
  Predict rate-limit exhaustion + budget burn per provider (DB-backed forecast)
  system
• Per-provider capacity status (24h) — request count, success rate, latency, cost, health
  Per-provider capacity status (24h) — request count, success rate, latency, cost, health
  system
• Filtered list of models routable right now (circuit-closed + sentinel-healthy + BYOK-keyed)
  Filtered list of models routable right now (circuit-closed + sentinel-healthy + BYOK-keyed)
  system
• Register an external connector with KMS-encrypted credentials
  Register an external connector with KMS-encrypted credentials
  system
• Soft-delete a connector (status=disabled, kept for audit)
  Soft-delete a connector (status=disabled, kept for audit)
  system
• Get a connector by id (credential envelope NEVER returned)
  Get a connector by id (credential envelope NEVER returned)
  system
• List active external connectors
  List active external connectors
  system
• Probe connector connectivity (HEAD baseUrl with decrypted auth)
  Probe connector connectivity (HEAD baseUrl with decrypted auth)
  system
• Update a connector (re-encrypts credential if supplied)
  Update a connector (re-encrypts credential if supplied)
  system
• Curated-catalog status: total endpoints, models, per-provider counts
  Curated-catalog status: total endpoints, models, per-provider counts
  system
• Admin view: all agent reputations for the tenant
  Admin view: all agent reputations for the tenant
  intelligence
• Caller's own agent reputation: score, tier, and tier multipliers
  Caller's own agent reputation: score, tier, and tier multipliers
  intelligence
• Remove canary configuration
  Remove canary configuration
  intelligence
• Read current canary configuration
  Read current canary configuration
  intelligence
• Per-variant outcome statistics for the active canary
  Per-variant outcome statistics for the active canary
  intelligence
• Set the canary traffic-split configuration for the current tenant
  Set the canary traffic-split configuration for the current tenant
  intelligence
• Fan a prompt out to 2–6 models in parallel and compare cost/latency/quality
  Fan a prompt out to 2–6 models in parallel and compare cost/latency/quality
  intelligence
• Audit trail (recent change events) for a config section
  Audit trail (recent change events) for a config section
  system
• Delete a config section (reset to defaults)
  Delete a config section (reset to defaults)
  system
• Read a single config section (sensitive fields redacted for non-admins)
  Read a single config section (sensitive fields redacted for non-admins)
  system
• Import configuration sections from the on-disk file (admin only)
  Import configuration sections from the on-disk file (admin only)
  system
• List all config sections (RBAC-filtered, sensitive fields redacted for non-admins)
  List all config sections (RBAC-filtered, sensitive fields redacted for non-admins)
  system
• Merge-patch a config section (RFC 7396) with optional OCC
  Merge-patch a config section (RFC 7396) with optional OCC
  system
• Replace a config section (full PUT) with OCC via If-Match header
  Replace a config section (full PUT) with OCC via If-Match header
  system
• Evaluate multi-model consensus (majority/quality/weighted) with optional fan-out
  Evaluate multi-model consensus (majority/quality/weighted) with optional fan-out
  intelligence
• Approve a pending request and execute its deferred action
  Approve a pending request and execute its deferred action
  systemapprovals
• List pending approval requests for the tenant
  List pending approval requests for the tenant
  systemapprovals
• Submit a deferred action for human review
  Submit a deferred action for human review
  systemapprovals
• Reject a pending request without executing its action
  Reject a pending request without executing its action
  systemapprovals
• List pending MCP tool-call approvals
  List pending MCP tool-call approvals
  systemmcp
• Approve a queued MCP tool call
  Approve a queued MCP tool call
  systemmcp
• Recent MCP tool-call audit entries for the tenant
  Recent MCP tool-call audit entries for the tenant
  systemmcp
• MCP bootstrap discovery (2-tool manifest, no auth)
  MCP bootstrap discovery (2-tool manifest, no auth)
  systemmcp
• Pre-auth MCP bootstrap — register a tenant in-band over MCP (2 tools)
  Pre-auth MCP bootstrap — register a tenant in-band over MCP (2 tools)
  systemmcp
• Core + external MCP tool catalog for the tenant
  Core + external MCP tool catalog for the tenant
  systemmcp
• MCP server discovery (capability + tool manifest)
  MCP server discovery (capability + tool manifest)
  systemmcp
• Open an MCP Streamable HTTP session against BR's control-plane tools
  Open an MCP Streamable HTTP session against BR's control-plane tools
  systemmcp
• Deny a queued MCP tool call
  Deny a queued MCP tool call
  systemmcp
• Trigger remote tool discovery for an MCP server
  Trigger remote tool discovery for an MCP server
  systemmcp
• Get MCP governance engine status
  Get MCP governance engine status
  systemmcp
• Update an MCP tool-name policy in the governance engine
  Update an MCP tool-name policy in the governance engine
  systemmcp
• Register an external MCP server for this tenant
  Register an external MCP server for this tenant
  systemmcp
• Remove an MCP server registration
  Remove an MCP server registration
  systemmcp
• Get details for an MCP server
  Get details for an MCP server
  systemmcp
• Trigger an on-demand health check for an MCP server
  Trigger an on-demand health check for an MCP server
  systemmcp
• Get the last health status for an MCP server
  Get the last health status for an MCP server
  systemmcp
• List registered MCP servers for this tenant
  List registered MCP servers for this tenant
  systemmcp
• Update an MCP server registration
  Update an MCP server registration
  systemmcp
• Execute a tool call through the MCP gateway (proxied + governed)
  Execute a tool call through the MCP gateway (proxied + governed)
  systemmcp
• List all discovered tools across registered MCP servers
  List all discovered tools across registered MCP servers
  systemmcp
• Get the memory-write approval-required flag
  Get the memory-write approval-required flag
  systemmemory
• Set the memory-write approval-required flag
  Set the memory-write approval-required flag
  systemmemory
• List entries in a specific memory block
  List entries in a specific memory block
  systemmemory
• List memory blocks with entry counts (optional ?project= filter)
  List memory blocks with entry counts (optional ?project= filter)
  systemmemory
• Bulk upsert core memory entries for a project (Brainstorm CLI)
  Bulk upsert core memory entries for a project (Brainstorm CLI)
  systemmemory
• Append a new core memory entry (alias for /v1/memory/store)
  Append a new core memory entry (alias for /v1/memory/store)
  systemmemory
• List all core memory entries (optional ?project= filter)
  List all core memory entries (optional ?project= filter)
  systemmemory
• Delete a memory entry
  Delete a memory entry
  systemmemory
• Update fact text and/or pin state for an entry
  Update fact text and/or pin state for an entry
  systemmemory
• Bootstrap memory from context documents via LLM extraction
  Bootstrap memory from context documents via LLM extraction
  systemmemory
• Approve a pending memory write (unified queue or legacy)
  Approve a pending memory write (unified queue or legacy)
  systemmemory
• List pending memory writes (unified queue + legacy)
  List pending memory writes (unified queue + legacy)
  systemmemory
• Reject a pending memory write
  Reject a pending memory write
  systemmemory
• Relevance-scored memory query (top-N matches)
  Relevance-scored memory query (top-N matches)
  systemmemory
• List shared memory entries plus pending approval count
  List shared memory entries plus pending approval count
  systemmemory
• Store a tenant-wide shared memory entry (may queue for approval)
  Store a tenant-wide shared memory entry (may queue for approval)
  systemmemory
• Append a core memory entry (canonical path)
  Append a core memory entry (canonical path)
  systemmemory
• Start the agent loop for a session and stream events as SSE
  Start the agent loop for a session and stream events as SSE
  systemagents
• All active runs for the tenant (status = running)
  All active runs for the tenant (status = running)
  systemagents
• Run history for an agent (sessions with aggregate metadata)
  Run history for an agent (sessions with aggregate metadata)
  systemagents
• Terminate a session (status → ended)
  Terminate a session (status → ended)
  systemagents
• Publish a user event to a running session (PG NOTIFY)
  Publish a user event to a running session (PG NOTIFY)
  systemagents
• Get a session by id
  Get a session by id
  systemagents
• Create an idle session for the agent (no loop)
  Create an idle session for the agent (no loop)
  systemagents
• Run a DAG-based mesh workflow, streaming step progress as SSE
  Run a DAG-based mesh workflow, streaming step progress as SSE
  systemmesh
• Auto-select a workflow preset from a natural-language description
  Auto-select a workflow preset from a natural-language description
  systemworkflows
• List available workflow presets
  List available workflow presets
  systemworkflows
• Cancel a workflow run
  Cancel a workflow run
  systemworkflows
• Run a workflow and stream events via SSE
  Run a workflow and stream events via SSE
  systemworkflows
• Get a workflow run by id
  Get a workflow run by id
  systemworkflows
• List recent workflow runs for the tenant
  List recent workflow runs for the tenant
  systemworkflows
• Create a workflow definition (optionally cloned from a preset)
  Create a workflow definition (optionally cloned from a preset)
  systemworkflows
• Delete a workflow definition
  Delete a workflow definition
  systemworkflows
• Get a workflow definition by id
  Get a workflow definition by id
  systemworkflows
• List workflow definitions for the tenant
  List workflow definitions for the tenant
  systemworkflows
• List registered agents in the mesh for this tenant
  List registered agents in the mesh for this tenant
  systemmesh
• Evaluate a mesh access decision for source → destination
  Evaluate a mesh access decision for source → destination
  systemmesh
• Deregister an agent from the mesh (mTLS required)
  Deregister an agent from the mesh (mTLS required)
  systemmesh
• Get a single forensic snapshot by id
  Get a single forensic snapshot by id
  systemmesh
• List forensic snapshots for the tenant
  List forensic snapshots for the tenant
  systemmesh
• Current mesh graph snapshot for this tenant
  Current mesh graph snapshot for this tenant
  systemmesh
• Historical mesh graph snapshots over the last N hours
  Historical mesh graph snapshots over the last N hours
  systemmesh
• Send a liveness heartbeat for the calling agent (mTLS required)
  Send a liveness heartbeat for the calling agent (mTLS required)
  systemmesh
• Proxy an A2A call through the mesh (mTLS required)
  Proxy an A2A call through the mesh (mTLS required)
  systemmesh
• Resolve a target DID via the Capability Registry and forward the invocation to the owning product (v0.3 P6.3)
  Resolve a target DID via the Capability Registry and forward the invocation to the owning product (v0.3 P6.3)
  systemmesha2a
• Create a mesh allow/deny policy
  Create a mesh allow/deny policy
  systemmesh
• Delete a mesh policy by id
  Delete a mesh policy by id
  systemmesh
• List mesh RBAC policies
  List mesh RBAC policies
  systemmesh
• Create a mesh behavioral profile
  Create a mesh behavioral profile
  systemmesh
• Delete a mesh behavioral profile by role
  Delete a mesh behavioral profile by role
  systemmesh
• List mesh behavioral profiles
  List mesh behavioral profiles
  systemmesh
• Register an agent in the service mesh (mTLS required)
  Register an agent in the service mesh (mTLS required)
  systemmesh
• Resolve a mesh hostname to its agent registration
  Resolve a mesh hostname to its agent registration
  systemmesh
• Register an OAuth app (developer-facing)
  Register an OAuth app (developer-facing)
  systemoauth
• Revoke an OAuth app (soft delete — sets active=false)
  Revoke an OAuth app (soft delete — sets active=false)
  systemoauth
• List OAuth apps for the tenant
  List OAuth apps for the tenant
  systemoauth
• HMAC-signed forensic export bundle (usage + security events)
  HMAC-signed forensic export bundle (usage + security events)
  systemforensics
• Reconstruct chronological timeline of events for a session
  Reconstruct chronological timeline of events for a session
  systemforensics
• Execute a Platform Contract tool by name (ChangeSet for mutations)
  Execute a Platform Contract tool by name (ChangeSet for mutations)
  systemgod-mode
• Discover Brainstorm Platform Contract tools available on BR
  Discover Brainstorm Platform Contract tools available on BR
  systemgod-mode
• Delete an agent manifest
  Delete an agent manifest
  systemgovernance
• Get an agent manifest by agent id
  Get an agent manifest by agent id
  systemgovernance
• Create or replace an agent manifest
  Create or replace an agent manifest
  systemgovernance
• List agent manifests (CAF Phase 2 semantic RBAC)
  List agent manifests (CAF Phase 2 semantic RBAC)
  systemgovernance
• Anomaly history (last N events)
  Anomaly history (last N events)
  systemgovernance
• Recent anomaly-detected security events
  Recent anomaly-detected security events
  systemgovernance
• Signed Governance Artifact for one request — control-mapped, verifiable evidence
  Signed Governance Artifact for one request — control-mapped, verifiable evidence
  systemgovernance
• Verify the hash-chain integrity of the completion audit trail
  Verify the hash-chain integrity of the completion audit trail
  systemgovernance
• Verify server-held evidence for one request — per-check signature / registry / chain / provenance
  Verify server-held evidence for one request — per-check signature / registry / chain / provenance
  systemgovernance
• Delete a behavioral profile by role
  Delete a behavioral profile by role
  systemgovernance
• Create or replace a behavioral profile for a role
  Create or replace a behavioral profile for a role
  systemgovernance
• List behavioral profiles (CAF Phase 2)
  List behavioral profiles (CAF Phase 2)
  systemgovernance
• Regulatory compliance autopilot (frameworks + score)
  Regulatory compliance autopilot (frameworks + score)
  systemgovernance
• Evidence coverage — fraction of recorded decisions bound to the audit chain
  Evidence coverage — fraction of recorded decisions bound to the audit chain
  systemgovernance
• Agent inventory — every caller seen in the window classified as registered / unregistered / untagged, with shadow_ratio
  Agent inventory — every caller seen in the window classified as registered / unregistered / untagged, with shadow_ratio
  systemgovernance
• Completion audit trail (per-request identity + outcome)
  Completion audit trail (per-request identity + outcome)
  systemgovernance
• Issue a verifiable agent credential (VAC)
  Issue a verifiable agent credential (VAC)
  systemgovernance
• Verify a credential signature and compute trust level
  Verify a credential signature and compute trust level
  systemgovernance
• Generate an EU AI Act compliance report
  Generate an EU AI Act compliance report
  systemgovernance
• Create a knowledge-escrow snapshot for an agent
  Create a knowledge-escrow snapshot for an agent
  systemgovernance
• Decision lineage — durable trace reconstruction (or ?live=true ring buffer)
  Decision lineage — durable trace reconstruction (or ?live=true ring buffer)
  systemgovernance
• The WHY answer for one request — verified audit block + policy_context + lineage
  The WHY answer for one request — verified audit block + policy_context + lineage
  systemgovernance
• Memory change history (append/replace/delete/pin/evict)
  Memory change history (append/replace/delete/pin/evict)
  systemgovernance
• Scan core memory for PII/policy violations
  Scan core memory for PII/policy violations
  systemgovernance
• Reconstruct memory state at a past timestamp (with optional diff)
  Reconstruct memory state at a past timestamp (with optional diff)
  systemgovernance
• Memory audit stats (operation counts by type)
  Memory audit stats (operation counts by type)
  systemgovernance
• Evaluate a PolicyContext against the tenant ruleset (no enforcement)
  Evaluate a PolicyContext against the tenant ruleset (no enforcement)
  systemgovernance
• Sleep-time refinement history
  Sleep-time refinement history
  systemgovernance
• Create a clean-room sovereignty policy between two orgs
  Create a clean-room sovereignty policy between two orgs
  systemgovernance
• Issue a provable purge of memory entries for an org
  Issue a provable purge of memory entries for an org
  systemgovernance
• Executive dashboard summary (memory health + activity)
  Executive dashboard summary (memory health + activity)
  systemgovernance
• Institutional intelligence (I3) index for the tenant
  Institutional intelligence (I3) index for the tenant
  systemgovernance
• Routing-sampling audit (agent trap defense)
  Routing-sampling audit (agent trap defense)
  systemgovernance
• Get a single check definition
  Get a single check definition
  systemguardrails
• List checks in the V2 guardrail registry
  List checks in the V2 guardrail registry
  systemguardrails
• Get the tenant guardrail pipeline config
  Get the tenant guardrail pipeline config
  systemguardrails
• Update the tenant guardrail pipeline config
  Update the tenant guardrail pipeline config
  systemguardrails
• Submit false-positive / true-positive feedback for a guardrail scan
  Submit false-positive / true-positive feedback for a guardrail scan
  systemguardrails
• Aggregated scan + feedback metrics (security_events or in-memory)
  Aggregated scan + feedback metrics (security_events or in-memory)
  systemguardrails
• Create a V2 guardrail pipeline
  Create a V2 guardrail pipeline
  systemguardrails
• Delete a V2 guardrail pipeline
  Delete a V2 guardrail pipeline
  systemguardrails
• Get a V2 guardrail pipeline by id
  Get a V2 guardrail pipeline by id
  systemguardrails
• List tenant V2 guardrail pipelines
  List tenant V2 guardrail pipelines
  systemguardrails
• Test a V2 guardrail pipeline against sample text
  Test a V2 guardrail pipeline against sample text
  systemguardrails
• Update a V2 guardrail pipeline
  Update a V2 guardrail pipeline
  systemguardrails
• Register an external guardrail provider
  Register an external guardrail provider
  systemguardrails
• Remove an external guardrail provider
  Remove an external guardrail provider
  systemguardrails
• List built-in + external guardrail providers
  List built-in + external guardrail providers
  systemguardrails
• List well-known provider templates
  List well-known provider templates
  systemguardrails
• Run text through the guardrail pipeline (testing/preview)
  Run text through the guardrail pipeline (testing/preview)
  systemguardrails
• Add a broadcast destination
  Add a broadcast destination
  systemobservability
• Remove a broadcast destination
  Remove a broadcast destination
  systemobservability
• Get the full broadcast config (enabled + destinations)
  Get the full broadcast config (enabled + destinations)
  systemobservability
• List configured broadcast destinations for the tenant
  List configured broadcast destinations for the tenant
  systemobservability
• Observability surface summary (broadcast state + destination count + sub-endpoints)
  Observability surface summary (broadcast state + destination count + sub-endpoints)
  systemobservability
• Get a single integration template (config schema + example)
  Get a single integration template (config schema + example)
  systemobservability
• List available integration template names
  List available integration template names
  systemobservability
• Deliver a synthetic event to a destination and report the observed outcome
  Deliver a synthetic event to a destination and report the observed outcome
  systemobservability
• Enable or disable broadcasting for the tenant
  Enable or disable broadcasting for the tenant
  systemobservability
• Update a broadcast destination
  Update a broadcast destination
  systemobservability
• Get A/B test results for a prompt
  Get A/B test results for a prompt
  systemprompts
• Start or stop an A/B test for a prompt
  Start or stop an A/B test for a prompt
  systemprompts
• Archive a prompt template (soft delete)
  Archive a prompt template (soft delete)
  systemprompts
• Create a versioned prompt template
  Create a versioned prompt template
  systemprompts
• Unified diff between two versions of a prompt
  Unified diff between two versions of a prompt
  systemprompts
• Export a single evaluation run as JSON or CSV
  Export a single evaluation run as JSON or CSV
  systemprompts
• List recent evaluation runs for a prompt with aggregate metrics
  List recent evaluation runs for a prompt with aggregate metrics
  systemprompts
• Run a prompt against test cases with a chosen scorer
  Run a prompt against test cases with a chosen scorer
  systemprompts
• Get a prompt template with its full version history
  Get a prompt template with its full version history
  systemprompts
• List all prompt templates for the tenant
  List all prompt templates for the tenant
  systemprompts
• Promote a prompt version to a higher environment
  Promote a prompt version to a higher environment
  systemprompts
• Test-resolve a prompt template with the given variables
  Test-resolve a prompt template with the given variables
  systemprompts
• Update a prompt — auto-creates a new version
  Update a prompt — auto-creates a new version
  systemprompts
• Register up to 10 provider keys in one call (returns 207)
  Register up to 10 provider keys in one call (returns 207)
  systemproviders
• Public catalog of supported provider IDs and base URLs
  Public catalog of supported provider IDs and base URLs
  systemproviders
• Remove a provider key by provider name
  Remove a provider key by provider name
  systemproviders
• List configured providers for the tenant (admin/operator only)
  List configured providers for the tenant (admin/operator only)
  systemproviders
• Store an encrypted provider API key for the tenant
  Store an encrypted provider API key for the tenant
  systemproviders
• Validate a provider API key with a lightweight live request
  Validate a provider API key with a lightweight live request
  systemproviders
• Compare routing strategies side-by-side on recorded traffic
  Compare routing strategies side-by-side on recorded traffic
  systemreplays
• List recorded routing decisions for the tenant
  List recorded routing decisions for the tenant
  systemreplays
• Simulate alternative routing strategy on recorded traffic
  Simulate alternative routing strategy on recorded traffic
  systemreplays
• Current degradation ladder state: level, reason, thresholds, budget utilization
  Current degradation ladder state: level, reason, thresholds, budget utilization
  intelligence
• OpenAI-compatible TTS (binary audio response)
  OpenAI-compatible TTS (binary audio response)
  completions
• OpenAI-compatible audio transcription (Whisper, multipart upload)
  OpenAI-compatible audio transcription (Whisper, multipart upload)
  completions
• Self-describing capability discovery — routing, models, budget, headers, errors
  Self-describing capability discovery — routing, models, budget, headers, errors
  system
• Machine-queryable, trust-scored graph of BR's own capabilities — query, don't read
  Machine-queryable, trust-scored graph of BR's own capabilities — query, don't read
  system
• OpenAI-compatible embeddings endpoint (routed through BR provider catalog)
  OpenAI-compatible embeddings endpoint (routed through BR provider catalog)
  completions
• OpenAI-compatible image generation (proxied to provider)
  OpenAI-compatible image generation (proxied to provider)
  completions
• Predict per-model cost for a completion request (no provider calls)
  Predict per-model cost for a completion request (no provider calls)
  intelligence
• Append items to an evaluation dataset (batch)
  Append items to an evaluation dataset (batch)
  system
• Create an evaluation dataset
  Create an evaluation dataset
  system
• Delete an evaluation dataset and all its items
  Delete an evaluation dataset and all its items
  system
• Delete a single dataset item
  Delete a single dataset item
  system
• Export dataset items (JSON default, CSV via ?format=csv)
  Export dataset items (JSON default, CSV via ?format=csv)
  system
• Get an evaluation dataset
  Get an evaluation dataset
  system
• Import items from production completion audit logs
  Import items from production completion audit logs
  system
• List evaluation datasets for the tenant
  List evaluation datasets for the tenant
  system
• List items in an evaluation dataset
  List items in an evaluation dataset
  system
• Update an evaluation dataset (name, description)
  Update an evaluation dataset (name, description)
  system
• Create an A/B-test experiment with weighted variants
  Create an A/B-test experiment with weighted variants
  intelligence
• Get an experiment with interim results + statistical significance
  Get an experiment with interim results + statistical significance
  intelligence
• List experiments for the tenant
  List experiments for the tenant
  intelligence
• Record an outcome for an experiment variant
  Record an outcome for an experiment variant
  intelligence
• Per-request routing-decision trace; optional LLM-narrated postmortem
  Per-request routing-decision trace; optional LLM-narrated postmortem
  intelligence
• Report outcome (success/partial/failure) for a routed request; the reward updates the model-quality posterior used by auto-selection
  Report outcome (success/partial/failure) for a routed request; the reward updates the model-quality posterior used by auto-selection
  intelligence
• Fleet model insights — top 10 by evaluations or model-specific
  Fleet model insights — top 10 by evaluations or model-specific
  intelligence
• Predictive routing recommendation with reasoning, evidence, and alternatives
  Predictive routing recommendation with reasoning, evidence, and alternatives
  intelligence
• Thompson-vs-static shadow comparator results + statistical significance
  Thompson-vs-static shadow comparator results + statistical significance
  intelligence
• Head-to-head comparison of 2-10 models
  Head-to-head comparison of 2-10 models
  intelligence
• Active deprecation alerts (filter by provider, level)
  Active deprecation alerts (filter by provider, level)
  intelligence
• Cost-quality Pareto frontier with dominated models
  Cost-quality Pareto frontier with dominated models
  intelligence
• Single model profile with ranking + deprecation alert
  Single model profile with ranking + deprecation alert
  intelligence
• Overall (or task-specific) model leaderboard
  Overall (or task-specific) model leaderboard
  intelligence
• Counterfactual ROI savings (Postgres-backed when configured)
  Counterfactual ROI savings (Postgres-backed when configured)
  intelligence
• Ingestor diagnostics, store size, deprecation alert count
  Ingestor diagnostics, store size, deprecation alert count
  intelligence
• Aggregated request-pattern × model performance data with optional filters
  Aggregated request-pattern × model performance data with optional filters
  intelligence
• Aggregated task-pattern recommendations across all tenants
  Aggregated task-pattern recommendations across all tenants
  intelligence
• Store a learned task pattern (tenant-scoped)
  Store a learned task pattern (tenant-scoped)
  intelligence
• Ranked model recommendations backed by production routing data
  Ranked model recommendations backed by production routing data
  intelligence
• Guardian overhead, cache hit rate, anomaly count (24h)
  Guardian overhead, cache hit rate, anomaly count (24h)
  intelligence
• Cascade activations (model escalation on failure)
  Cascade activations (model escalation on failure)
  intelligence
• Recent routing decisions with decisionTrace metadata
  Recent routing decisions with decisionTrace metadata
  intelligence
• Brainstorm CLI delegated routing — pick a model for a task spec
  Brainstorm CLI delegated routing — pick a model for a task spec
  intelligence
• SSE stream of live routing events for the tenant: route-time decisions (kind=decision) and completion-time outcomes (kind=outcome) carrying a validity-derived success label and latency_ms
  SSE stream of live routing events for the tenant: route-time decisions (kind=decision) and completion-time outcomes (kind=outcome) carrying a validity-derived success label and latency_ms
  intelligence
• Export trajectories as JSONL for offline training pipelines
  Export trajectories as JSONL for offline training pipelines
  intelligence
• Query stored trajectories with filters (project, request_type, source, limit, since)
  Query stored trajectories with filters (project, request_type, source, limit, since)
  intelligence
• Record an orchestration trajectory for the current tenant
  Record an orchestration trajectory for the current tenant
  intelligence
• Aggregate statistics over stored trajectories for the current tenant
  Aggregate statistics over stored trajectories for the current tenant
  intelligence
• Create a new API key (plaintext returned once)
  Create a new API key (plaintext returned once)
  system
• List API keys (no plaintext, preview only)
  List API keys (no plaintext, preview only)
  system
• Revoke an API key (soft-delete; cache invalidated immediately)
  Revoke an API key (soft-delete; cache invalidated immediately)
  system
• Update an API key's scopes, limits, or metadata (self-service)
  Update an API key's scopes, limits, or metadata (self-service)
  system
• Delete an IdP group → role mapping
  Delete an IdP group → role mapping
  system
• Get a single group → role mapping by ID
  Get a single group → role mapping by ID
  system
• List IdP group → RBAC role mappings for the tenant
  List IdP group → RBAC role mappings for the tenant
  system
• Update an IdP group mapping's role, scopes, or display name
  Update an IdP group mapping's role, scopes, or display name
  system
• Liveness probe — returns ok while the process is up and serving HTTP
  Liveness probe — returns ok while the process is up and serving HTTP
  system
• Generate a dashboard claim link (admin scope required)
  Generate a dashboard claim link (admin scope required)
  system
• Start a device-authorization flow (admin scope required)
  Start a device-authorization flow (admin scope required)
  system
• Poll device-authorization status
  Poll device-authorization status
  system
• Generate a browser-based dashboard link URL (admin scope)
  Generate a browser-based dashboard link URL (admin scope)
  system
• Daily cost-optimization insight rollup (requires DB)
  Daily cost-optimization insight rollup (requires DB)
  system
• Budget runway forecast (daily or monthly period)
  Budget runway forecast (daily or monthly period)
  system
• Model-substitution recommendations for cost reduction
  Model-substitution recommendations for cost reduction
  system
• Waste detection report. Returns 403 privacy_restricted on strict privacy mode.
  Waste detection report. Returns 403 privacy_restricted on strict privacy mode.
  system
• Emergency stop — suspend all routing for the authenticated tenant
  Emergency stop — suspend all routing for the authenticated tenant
  security
• Resume routing for the authenticated tenant
  Resume routing for the authenticated tenant
  security
• Deactivate a scoped kill switch
  Deactivate a scoped kill switch
  security
• Activate a scoped kill switch (agent, tool, or provider)
  Activate a scoped kill switch (agent, tool, or provider)
  security
• List all active scoped kill switches for the tenant
  List all active scoped kill switches for the tenant
  security
• Get current kill switch state + activation history
  Get current kill switch state + activation history
  security
• Per-model performance rankings across reward, quality, speed, value, reliability
  Per-model performance rankings across reward, quality, speed, value, reliability
  system
• List MCP servers registered for the current tenant
  List MCP servers registered for the current tenant
  security
• Register a trusted MCP server for the current tenant
  Register a trusted MCP server for the current tenant
  security
• Remove an MCP server from the tenant's registry
  Remove an MCP server from the tenant's registry
  security
• Prometheus-compatible metrics endpoint (text exposition format)
  Prometheus-compatible metrics endpoint (text exposition format)
  system
• OpenAI-compatible moderation endpoint with BR jailbreak/PII layer
  OpenAI-compatible moderation endpoint with BR jailbreak/PII layer
  security
• Per-model capability profile: catalog flags + production quality/latency/success metrics
  Per-model capability profile: catalog flags + production quality/latency/success metrics
  system
• List available models for the authenticated tenant (auto-detects OpenAI vs Anthropic format)
  List available models for the authenticated tenant (auto-detects OpenAI vs Anthropic format)
  system
• The tenant's effective data-protection posture — retention, no-training, attested processors, and enforcement behavior
  The tenant's effective data-protection posture — retention, no-training, attested processors, and enforcement behavior
  systemgovernance
• Personalized one-call agent setup: identity, models, tools, budget, bootstrap path
  Personalized one-call agent setup: identity, models, tools, budget, bootstrap path
  system
• Recent alert-delivery receipts + last delivery timestamp — proves SNS alarms actually reach a subscriber
  Recent alert-delivery receipts + last delivery timestamp — proves SNS alarms actually reach a subscriber
  system
• Authenticated runtime build identity for evidence-gated production verification
  Authenticated runtime build identity for evidence-gated production verification
  system
• Manually reset circuit breakers (endpoint, provider, or all). Platform-operator only — breakers are shared across tenants.
  Manually reset circuit breakers (endpoint, provider, or all). Platform-operator only — breakers are shared across tenants.
  system
• Run provider-doctor against the fleet; returns structured diagnoses + remediations
  Run provider-doctor against the fleet; returns structured diagnoses + remediations
  system
• GET alias for /v1/ops/diagnose (read-only fleet diagnosis)
  GET alias for /v1/ops/diagnose (read-only fleet diagnosis)
  system
• Single-pane-of-glass status: providers, endpoints, budget, usage
  Single-pane-of-glass status: providers, endpoints, budget, usage
  system
• OpenTelemetry exporter configuration: endpoint, service name, batching
  OpenTelemetry exporter configuration: endpoint, service name, batching
  system
• Archive a routing preset (soft-delete)
  Archive a routing preset (soft-delete)
  system
• Create a routing preset (saved `@preset/<slug>` configuration)
  Create a routing preset (saved `@preset/<slug>` configuration)
  system
• Get a routing preset by slug
  Get a routing preset by slug
  system
• List active routing presets for the tenant
  List active routing presets for the tenant
  system
• Update a routing preset (partial)
  Update a routing preset (partial)
  system
• Get a single registered project by name (404 on missing)
  Get a single registered project by name (404 on missing)
  system
• List registered projects for the current tenant
  List registered projects for the current tenant
  system
• Update project metadata (404 on missing)
  Update project metadata (404 on missing)
  system
• Register or sync a project (upsert by name; 201 on create, 200 on update)
  Register or sync a project (upsert by name; 201 on create, 200 on update)
  system
• Get recent activity for a project (filterable by ?since=1h)
  Get recent activity for a project (filterable by ?since=1h)
  system
• Report an activity record for a project
  Report an activity record for a project
  system
• Archive a project (soft-delete)
  Archive a project (soft-delete)
  system
• Get a project's routing config
  Get a project's routing config
  system
• Set project routing config (default model, budget, conventions, etc.)
  Set project routing config (default model, budget, conventions, etc.)
  system
• Create a project under an existing workspace
  Create a project under an existing workspace
  system
• Get a project by id
  Get a project by id
  system
• List active projects (optionally filtered by ?workspaceId=)
  List active projects (optionally filtered by ?workspaceId=)
  system
• Update a project (partial)
  Update a project (partial)
  system
• OWASP LLM Top 10 coverage assessment for the current tenant's controls
  OWASP LLM Top 10 coverage assessment for the current tenant's controls
  security
• OWASP LLM Top 10 item catalog (id, title, description, controls)
  OWASP LLM Top 10 item catalog (id, title, description, controls)
  security
• OWASP LLM Top 10 coverage assessment for the dashboard Compliance view
  OWASP LLM Top 10 coverage assessment for the dashboard Compliance view
  security
• Per-provider health combining sentinel probes, circuit breakers, and BYOK key presence
  Per-provider health combining sentinel probes, circuit breakers, and BYOK key presence
  system
• Caller's RBAC posture — roles, granted/denied permissions, upgrade paths
  Caller's RBAC posture — roles, granted/denied permissions, upgrade paths
  system
• Machine registration — create tenant + admin user + API key atomically
  Machine registration — create tenant + admin user + API key atomically
  system
• Agent self-awareness — identity, health, budget, memory, suggestions
  Agent self-awareness — identity, health, budget, memory, suggestions
  system
• Supported red-team categories
  Supported red-team categories
  security
• Start an automated red-team run against a model
  Start an automated red-team run against a model
  security
• Fetch a red-team run by ID
  Fetch a red-team run by ID
  security
• List red-team runs for the current tenant
  List red-team runs for the current tenant
  security
• Acknowledge a shadow-AI alert by ID
  Acknowledge a shadow-AI alert by ID
  security
• List shadow-AI alerts for the current tenant (filterable by type/severity)
  List shadow-AI alerts for the current tenant (filterable by type/severity)
  security
• Fetch a scan result by ID
  Fetch a scan result by ID
  security
• Get the scan configuration for the current tenant
  Get the scan configuration for the current tenant
  security
• Reset the detection baseline for the current tenant
  Reset the detection baseline for the current tenant
  security
• Trigger an immediate scan and return the execution record
  Trigger an immediate scan and return the execution record
  security
• Update the scan configuration (merges with existing config)
  Update the scan configuration (merges with existing config)
  security
• Alert summary counts for the current tenant
  Alert summary counts for the current tenant
  security
• Recent per-tenant anomaly alerts (process-local)
  Recent per-tenant anomaly alerts (process-local)
  security
• Export the tenant's anomaly-detection baselines
  Export the tenant's anomaly-detection baselines
  security
• Import previously-exported anomaly-detection baselines
  Import previously-exported anomaly-detection baselines
  security
• Per-entity per-metric anomaly stats
  Per-entity per-metric anomaly stats
  security
• List firewall interceptions (tool_firewall violations or guardrail warnings)
  List firewall interceptions (tool_firewall violations or guardrail warnings)
  security
• Read the tenant's policy ruleset
  Read the tenant's policy ruleset
  security
• Built-in policy presets (e.g. L3 baseline)
  Built-in policy presets (e.g. L3 baseline)
  security
• Update the tenant's policy ruleset (invalidates policy-engine cache)
  Update the tenant's policy ruleset (invalidates policy-engine cache)
  security
• Evaluate a context against the tenant's policy ruleset
  Evaluate a context against the tenant's policy ruleset
  security
• Get one policy pack (full rules + framework mapping)
  Get one policy pack (full rules + framework mapping)
  securitygovernance
• List the built-in policy pack library (named, versioned, framework-tagged)
  List the built-in policy pack library (named, versioned, framework-tagged)
  securitygovernance
• Clear the tenant's declared processor facts (self-service, API key)
  Clear the tenant's declared processor facts (self-service, API key)
  securitygovernance
• Read back the tenant's parsed processor facts, with anything unparseable reported
  Read back the tenant's parsed processor facts, with anything unparseable reported
  securitygovernance
• Persist the tenant's own processor facts so a constrained request can route (self-service, API key)
  Persist the tenant's own processor facts so a constrained request can route (self-service, API key)
  securitygovernance
• Dry-run validate processor facts before writing them to tenant settings
  Dry-run validate processor facts before writing them to tenant settings
  securitygovernance
• Get SIEM destination config (auth token never returned)
  Get SIEM destination config (auth token never returned)
  security
• Set SIEM destination config (auth token KMS-encrypted)
  Set SIEM destination config (auth token KMS-encrypted)
  security
• Overall security posture — policy + anomaly tracking summary
  Overall security posture — policy + anomaly tracking summary
  security
• Get the most recently updated session for a project
  Get the most recently updated session for a project
  system
• Save session state (≤1MB blob, upserts by session id)
  Save session state (≤1MB blob, upserts by session id)
  system
• Initiate signup: send 6-digit verification code to email
  Initiate signup: send 6-digit verification code to email
  system
• Verify code → create tenant + user + API key atomically
  Verify code → create tenant + user + API key atomically
  system
• Get the tenant's sleep-time refinement configuration
  Get the tenant's sleep-time refinement configuration
  system
• Update the tenant's sleep-time refinement configuration
  Update the tenant's sleep-time refinement configuration
  system
• Trigger an immediate sleep-time memory refinement pass
  Trigger an immediate sleep-time memory refinement pass
  system
• Query task-run history (filter by project, limit)
  Query task-run history (filter by project, limit)
  system
• Report a completed task run (Brainstorm CLI integration; 201)
  Report a completed task run (Brainstorm CLI integration; 201)
  system
• Schedule a background agent task (cron-scheduled prompt)
  Schedule a background agent task (cron-scheduled prompt)
  system
• Cancel a scheduled background task
  Cancel a scheduled background task
  system
• List all background tasks for the tenant
  List all background tasks for the tenant
  system
• SSE telemetry stream: model health, budget alerts, routing decisions
  SSE telemetry stream: model health, budget alerts, routing decisions
  system
• Returns current Terms of Service version, summary, and URL
  Returns current Terms of Service version, summary, and URL
  system
• Aggregated spend per cost center for the period
  Aggregated spend per cost center for the period
  system
• Aggregated spend per agent owner for the period
  Aggregated spend per agent owner for the period
  system
• Submit quality feedback for a specific request
  Submit quality feedback for a specific request
  system
• Per-model usage breakdown for the current period
  Per-model usage breakdown for the current period
  system
• Alias of /v1/usage/summary served at the bare /v1/usage path
  Alias of /v1/usage/summary served at the bare /v1/usage path
  system
• Total spend for the current billing period
  Total spend for the current billing period
  system
• Spend, request count, latency summary for the current period
  Spend, request count, latency summary for the current period
  system
• Create a webhook subscription (returns secret once); 400 on SSRF-blocked URL
  Create a webhook subscription (returns secret once); 400 on SSRF-blocked URL
  system
• Delete a webhook by ID (404 on missing)
  Delete a webhook by ID (404 on missing)
  system
• Recent delivery history for a webhook (last 50)
  Recent delivery history for a webhook (last 50)
  system
• List webhook subscriptions for the current tenant
  List webhook subscriptions for the current tenant
  system
• Send a test event to a webhook; records delivery row regardless of outcome
  Send a test event to a webhook; records delivery row regardless of outcome
  system
• Update webhook URL/events/is_active (400 SSRF, 404 missing)
  Update webhook URL/events/is_active (400 SSRF, 404 missing)
  system
• Archive a workspace (soft-delete)
  Archive a workspace (soft-delete)
  system
• Create a workspace under the tenant
  Create a workspace under the tenant
  system
• Get a workspace by id
  Get a workspace by id
  system
• List active workspaces for the tenant
  List active workspaces for the tenant
  system
• Update workspace metadata (name, slug, settings, etc.)
  Update workspace metadata (name, slug, settings, etc.)
  system
• Register a new XDR/SIEM destination
  Register a new XDR/SIEM destination
  system
• Remove an XDR/SIEM destination
  Remove an XDR/SIEM destination
  system
• Toggle an XDR destination on/off
  Toggle an XDR destination on/off
  system
• List XDR/SIEM destinations for the tenant
  List XDR/SIEM destinations for the tenant
  system
• Get delivery stats for an XDR destination
  Get delivery stats for an XDR destination
  system
• Send a synthetic test event to a destination
  Send a synthetic test event to a destination
  system
• Update an XDR/SIEM destination (partial)
  Update an XDR/SIEM destination (partial)
  system
• Delete a workspace file
  Delete a workspace file
  workspace
• List workspace filenames for the caller's agent scope
  List workspace filenames for the caller's agent scope
  workspace
• Read a workspace file
  Read a workspace file
  workspace
• Create or update a workspace file
  Create or update a workspace file
  workspace
• Guardian overhead, cache hit rate, anomaly count — dashboard JWT
  Guardian overhead, cache hit rate, anomaly count — dashboard JWT
  intelligence
• Cascade activations (model escalation on failure) — dashboard JWT
  Cascade activations (model escalation on failure) — dashboard JWT
  intelligence
• Recent routing decisions with decisionTrace metadata (dashboard JWT)
  Recent routing decisions with decisionTrace metadata (dashboard JWT)
  intelligence
• Create a new dashboard-issued API key with optional controls
  Create a new dashboard-issued API key with optional controls
  api_keys
• Revoke an API key (own keys; tenant owner/admin: any tenant key)
  Revoke an API key (own keys; tenant owner/admin: any tenant key)
  api_keys
• List ALL the tenant's API keys (masked, with owner + created_via)
  List ALL the tenant's API keys (masked, with owner + created_via)
  api_keys
• Store a new encrypted provider key (BYOK)
  Store a new encrypted provider key (BYOK)
  provider_keys
• Deactivate a provider key (does not delete row)
  Deactivate a provider key (does not delete row)
  provider_keys
• List active provider keys (masked, no plaintext)
  List active provider keys (masked, no plaintext)
  provider_keys
• List grants for the tenant (filter by subject / status / root / capability)
  List grants for the tenant (filter by subject / status / root / capability)
  grantsdelegationgovernance
• Fetch a grant record + verified chain summary
  Fetch a grant record + verified chain summary
  grantsdelegationgovernance
• Export the per-link-verifiable chain bundle (envelopes + signatures + JWKS ref)
  Export the per-link-verifiable chain bundle (envelopes + signatures + JWKS ref)
  grantsdelegationgovernance
• Signed PDP verdict for a principal + requested scope (the dashboard simulator)
  Signed PDP verdict for a principal + requested scope (the dashboard simulator)
  grantsdelegationpdpgovernance
• Break-glass revoke (tenant owner/admin; cascade default true; audited as override)
  Break-glass revoke (tenant owner/admin; cascade default true; audited as override)
  grantsdelegationgovernancecontainment
• Agent budget configs + leaderboard
  Agent budget configs + leaderboard
  budget
• Configure a per-agent budget
  Configure a per-agent budget
  budget
• Budget alert thresholds + webhook config
  Budget alert thresholds + webhook config
  budget
• Update budget alert configuration
  Update budget alert configuration
  budget
• Recent budget alert events
  Recent budget alert events
  budget
• Budget forecast + anomaly detection from the last 30 days of spend
  Budget forecast + anomaly detection from the last 30 days of spend
  budget
• Tenant budget limits (daily + monthly)
  Tenant budget limits (daily + monthly)
  budget
• Update tenant budget limits (merge: null clears, undefined leaves)
  Update tenant budget limits (merge: null clears, undefined leaves)
  budget
• Tenant-level budget status (daily + monthly spent vs. limits)
  Tenant-level budget status (daily + monthly spent vs. limits)
  budget
• Activate a scoped kill switch (admin only)
  Activate a scoped kill switch (admin only)
  killswitch
• Deactivate a scoped kill switch (admin only)
  Deactivate a scoped kill switch (admin only)
  killswitch
• List active scoped kill-switches (per-agent / per-tool / per-provider)
  List active scoped kill-switches (per-agent / per-tool / per-provider)
  killswitch
• Tenant kill-switch state + activation history
  Tenant kill-switch state + activation history
  killswitch
• Approve a pending approval record
  Approve a pending approval record
  approvals
• List pending approval records (auto-expires past expiresAt)
  List pending approval records (auto-expires past expiresAt)
  approvals
• Reject a pending approval record
  Reject a pending approval record
  approvals
• Create a connector (credential encrypted via KMS envelope when present)
  Create a connector (credential encrypted via KMS envelope when present)
  connectors
• List active connectors (credentials redacted)
  List active connectors (credentials redacted)
  connectors
• Create a project under a workspace
  Create a project under a workspace
  projects
• List active projects (optionally filtered by workspaceId)
  List active projects (optionally filtered by workspaceId)
  projects
• Create a task
  Create a task
  tasks
• Delete a task
  Delete a task
  tasks
• List the tenant's tasks (proxies /v1/tasks logic)
  List the tenant's tasks (proxies /v1/tasks logic)
  tasks
• Create a workspace
  Create a workspace
  workspaces
• List active (non-archived) workspaces for the tenant
  List active (non-archived) workspaces for the tenant
  workspaces
• Platform-admin daily digest (platform admin only)
  Platform-admin daily digest (platform admin only)
  admin
• Create an invite code (platform admin only)
  Create an invite code (platform admin only)
  admin
• Delete an invite code (platform admin only)
  Delete an invite code (platform admin only)
  admin
• List invite codes (platform admin only)
  List invite codes (platform admin only)
  admin
• Check whether the caller is on the platform-admin allowlist
  Check whether the caller is on the platform-admin allowlist
  admin
• Approve a pending tenant (platform admin only)
  Approve a pending tenant (platform admin only)
  admin
• Get one tenant by ID (platform admin only)
  Get one tenant by ID (platform admin only)
  admin
• List tenants (platform admin only)
  List tenants (platform admin only)
  admin
• Reject a pending tenant (platform admin only)
  Reject a pending tenant (platform admin only)
  admin
• Set per-tenant aggregate rate limit (platform admin only)
  Set per-tenant aggregate rate limit (platform admin only)
  admin
• Suspend an active tenant (platform admin only)
  Suspend an active tenant (platform admin only)
  admin
• Seed synthetic firewall + anomaly + forensic + mesh events (admin role)
  Seed synthetic firewall + anomaly + forensic + mesh events (admin role)
  admin
• Start or stop an A/B test on a prompt
  Start or stop an A/B test on a prompt
  prompts
• Get current A/B test state for a prompt
  Get current A/B test state for a prompt
  prompts
• Create a new prompt template (version 1)
  Create a new prompt template (version 1)
  prompts
• Archive a prompt (soft-delete: marks archived flag)
  Archive a prompt (soft-delete: marks archived flag)
  prompts
• Get one prompt template (with all versions)
  Get one prompt template (with all versions)
  prompts
• List prompt templates (non-archived)
  List prompt templates (non-archived)
  prompts
• Promote a prompt version to a target environment
  Promote a prompt version to a target environment
  prompts
• Render a prompt template with the supplied variables (dry-run)
  Render a prompt template with the supplied variables (dry-run)
  prompts
• Update a prompt — appends a new version, doesn't mutate existing
  Update a prompt — appends a new version, doesn't mutate existing
  prompts
• Get the tenant broadcast config (destinations + enabled flag)
  Get the tenant broadcast config (destinations + enabled flag)
  observability
• Create an observability destination (broadcast sink)
  Create an observability destination (broadcast sink)
  observability
• Delete an observability destination
  Delete an observability destination
  observability
• Update an observability destination
  Update an observability destination
  observability
• Get onboarding wizard state for the tenant
  Get onboarding wizard state for the tenant
  onboarding
• Time-to-first-completion metrics for the onboarding wizard
  Time-to-first-completion metrics for the onboarding wizard
  onboarding
• Update onboarding wizard state (merge with current)
  Update onboarding wizard state (merge with current)
  onboarding
• Semantic + exact-match cache stats; persistent hit-rate from usage_events
  Semantic + exact-match cache stats; persistent hit-rate from usage_events
  ops
• Endpoint health + budget + usage summary (live router fallback to DB)
  Endpoint health + budget + usage summary (live router fallback to DB)
  ops
• Thompson sampling bandit arm stats (strategy + per-arm)
  Thompson sampling bandit arm stats (strategy + per-arm)
  routing
• Set tenant routing strategy (price / quality / balanced)
  Set tenant routing strategy (price / quality / balanced)
  routing
• Clear the tenant's KMS config (existing keys still decrypt via row-level ARNs)
  Clear the tenant's KMS config (existing keys still decrypt via row-level ARNs)
  tenant_kms
• Get the tenant's KMS configuration
  Get the tenant's KMS configuration
  tenant_kms
• Set the tenant's KMS ARNs (kmsArn required)
  Set the tenant's KMS ARNs (kmsArn required)
  tenant_kms
• Round-trip a test plaintext through the supplied KMS config
  Round-trip a test plaintext through the supplied KMS config
  tenant_kms
• Get the tenant settings blob
  Get the tenant settings blob
  tenant_settings
• Merge tenant settings (contentLogging + features merged deep, rest shallow)
  Merge tenant settings (contentLogging + features merged deep, rest shallow)
  tenant_settings
• Approve a pending MCP execution
  Approve a pending MCP execution
  mcp
• Deny a pending MCP execution
  Deny a pending MCP execution
  mcp
• List pending MCP tool-execution approvals
  List pending MCP tool-execution approvals
  mcp
• Recent MCP tool-execution audit entries
  Recent MCP tool-execution audit entries
  mcp
• Update MCP governance policy for a specific tool
  Update MCP governance policy for a specific tool
  mcp
• MCP governance status
  MCP governance status
  mcp
• Re-discover an MCP server's tools
  Re-discover an MCP server's tools
  mcp
• Trigger an MCP server health probe
  Trigger an MCP server health probe
  mcp
• Cached MCP server health status
  Cached MCP server health status
  mcp
• Register a new MCP server
  Register a new MCP server
  mcp
• Remove an MCP server
  Remove an MCP server
  mcp
• Get one MCP server (redacted)
  Get one MCP server (redacted)
  mcp
• List enabled MCP servers for the tenant
  List enabled MCP servers for the tenant
  mcp
• Update an MCP server
  Update an MCP server
  mcp
• List all MCP tools discoverable across servers
  List all MCP tools discoverable across servers
  mcp
• SSE stream — real-time dashboard updates (dual auth)
  SSE stream — real-time dashboard updates (dual auth)
  events
• Signed forensic-export bundle (usage + security events, filtered)
  Signed forensic-export bundle (usage + security events, filtered)
  forensics
• Stitched usage + security event timeline for a session
  Stitched usage + security event timeline for a session
  forensics
• Verify the hash-chain integrity of the tenant's recent audit window
  Verify the hash-chain integrity of the tenant's recent audit window
  governanceaudit
• Detached tenant-HMAC over a caller-supplied entry. NOT evidence minting — see /v1/governance/artifacts/{request_id}
  Detached tenant-HMAC over a caller-supplied entry. NOT evidence minting — see /v1/governance/artifacts/{request_id}
  governance
• Check a detached tenant-HMAC. NOT evidence verification — see POST /v1/governance/audit/verify
  Check a detached tenant-HMAC. NOT evidence verification — see POST /v1/governance/audit/verify
  governance
• Delete a behavioral profile by role (admin)
  Delete a behavioral profile by role (admin)
  governance
• List behavioral profiles for the tenant
  List behavioral profiles for the tenant
  governance
• Create or update a behavioral profile for a role (admin)
  Create or update a behavioral profile for a role (admin)
  governance
• Recent chained audit rows projected for the Ledger view (+ head hash)
  Recent chained audit rows projected for the Ledger view (+ head hash)
  governanceaudit
• PII scan over the tenant's core memory entries
  PII scan over the tenant's core memory entries
  governance
• List the tenant's request-scoped liaison plans (read-only; distinct from grants)
  List the tenant's request-scoped liaison plans (read-only; distinct from grants)
  governanceplans
• Dry-run the tenant policy engine against a hypothetical action
  Dry-run the tenant policy engine against a hypothetical action
  governance
• Dry multi-source scope composition (per-source lanes, no enforcement side effects)
  Dry multi-source scope composition (per-source lanes, no enforcement side effects)
  governanceenforcementpdp
• Per-source scope enforcement: configured vs effective (cohort-aware, R6)
  Per-source scope enforcement: configured vs effective (cohort-aware, R6)
  governanceenforcement
• Would-deny preview: warn-mode denials over an adjustable lookback, deduped
  Would-deny preview: warn-mode denials over an adjustable lookback, deduped
  governanceauditenforcement
• Unified diff between two versions of a prompt template
  Unified diff between two versions of a prompt template
  prompts
• Guardrail check registry — tenant-agnostic catalog
  Guardrail check registry — tenant-agnostic catalog
  guardrails
• Get the caller tenant's guardrail config
  Get the caller tenant's guardrail config
  guardrails
• Update the caller tenant's guardrail config
  Update the caller tenant's guardrail config
  guardrails
• Submit guardrail feedback (false-positive / true-positive)
  Submit guardrail feedback (false-positive / true-positive)
  guardrails
• Per-scanner guardrail run/pass/fail/error metrics + feedback summary
  Per-scanner guardrail run/pass/fail/error metrics + feedback summary
  guardrails
• Create a new V2 guardrail pipeline
  Create a new V2 guardrail pipeline
  guardrails
• Delete a V2 guardrail pipeline
  Delete a V2 guardrail pipeline
  guardrails
• List V2 guardrail pipelines for the tenant
  List V2 guardrail pipelines for the tenant
  guardrails
• Execute a pipeline against a sample text — returns the check verdicts
  Execute a pipeline against a sample text — returns the check verdicts
  guardrails
• Update an existing V2 guardrail pipeline
  Update an existing V2 guardrail pipeline
  guardrails
• List per-block memory stats for the caller's tenant
  List per-block memory stats for the caller's tenant
  memory
• Create a core memory entry
  Create a core memory entry
  memory
• Delete a core memory entry
  Delete a core memory entry
  memory
• List all core memory entries for the caller's tenant
  List all core memory entries for the caller's tenant
  memory
• Update a core memory entry (fact text and/or pin status)
  Update a core memory entry (fact text and/or pin status)
  memory
• Approve a pending memory write (commits to shared memory)
  Approve a pending memory write (commits to shared memory)
  memory
• List pending memory-write approvals
  List pending memory-write approvals
  memory
• Reject a pending memory write
  Reject a pending memory write
  memory
• Score-rank core memory entries against a query string
  Score-rank core memory entries against a query string
  memory
• List shared-memory entries (tenant-wide)
  List shared-memory entries (tenant-wide)
  memory
• Store a shared-memory entry (may enqueue for approval)
  Store a shared-memory entry (may enqueue for approval)
  memory
• Full pricing catalog across all providers (no auth)
  Full pricing catalog across all providers (no auth)
  models
• Model performance rankings (Thompson-sampling reward + live metrics)
  Model performance rankings (Thompson-sampling reward + live metrics)
  models
• Available model list for the dashboard (no auth)
  Available model list for the dashboard (no auth)
  models
• Dashboard playground completions proxy (Supabase JWT)
  Dashboard playground completions proxy (Supabase JWT)
  playground
• List evaluation datasets for the dashboard tenant (JWT)
  List evaluation datasets for the dashboard tenant (JWT)
  eval
• Aggregate usage stats for the tenant
  Aggregate usage stats for the tenant
  usage
• Per-model usage breakdown for the tenant
  Per-model usage breakdown for the tenant
  usage
• Daily usage time series
  Daily usage time series
  usage
• Submit quality feedback for a request (0–1 score + comment)
  Submit quality feedback for a request (0–1 score + comment)
  usage
• Spend forecast for the tenant
  Spend forecast for the tenant
  insights
• Estimated savings vs. baseline model selection
  Estimated savings vs. baseline model selection
  insights
• Waste insights (over-provisioned requests, duplicate work)
  Waste insights (over-provisioned requests, duplicate work)
  insights
• Optimization suggestions for cost / latency
  Optimization suggestions for cost / latency
  insights
• 30-day cost breakdown by provider, model, and API key
  30-day cost breakdown by provider, model, and API key
  billing
• Export the last 30 days of usage events as CSV
  Export the last 30 days of usage events as CSV
  billing
• Usage time series (bucket = hour/day/week)
  Usage time series (bucket = hour/day/week)
  analytics
• Latency-distribution histogram + percentiles
  Latency-distribution histogram + percentiles
  analytics
• Paginated request log listing (provider/model/status/search filters)
  Paginated request log listing (provider/model/status/search filters)
  logs
• Single request log detail
  Single request log detail
  logs
• Replay request/response content (opt-in via tenant content-logging flag)
  Replay request/response content (opt-in via tenant content-logging flag)
  logs
• Poll for an async prompt-rewrite suggestion for a flagged request
  Poll for an async prompt-rewrite suggestion for a flagged request
  logs
• Decision trace (Thompson-sampling routing breakdown) for a request
  Decision trace (Thompson-sampling routing breakdown) for a request
  logs
• Tenant security event feed
  Tenant security event feed
  security_events
• Governance violation rollup (N-day window)
  Governance violation rollup (N-day window)
  security_events
• Tool firewall interception feed
  Tool firewall interception feed
  firewall
• List mesh agents currently registered for the tenant
  List mesh agents currently registered for the tenant
  mesh
• List active cert revocations for the tenant
  List active cert revocations for the tenant
  certs
• Suspend a tenant by revoking all live agent certs
  Suspend a tenant by revoking all live agent certs
  certs
• Reinstate a previously blocked tenant
  Reinstate a previously blocked tenant
  certs
• List declared agent manifests for the tenant
  List declared agent manifests for the tenant
  agent-manifests
• Create or update an agent manifest declaration (admin only)
  Create or update an agent manifest declaration (admin only)
  agent-manifests
• Delete an agent manifest declaration (admin only)
  Delete an agent manifest declaration (admin only)
  agent-manifests
• Anomaly-detection events for the tenant (last 100)
  Anomaly-detection events for the tenant (last 100)
  anomaly
• Kill-switch triggered events for the tenant (last 100)
  Kill-switch triggered events for the tenant (last 100)
  anomaly
• List agent profiles for the tenant
  List agent profiles for the tenant
  agent-profiles
• Get a single agent profile by ID
  Get a single agent profile by ID
  agent-profiles
• Create a new agent profile (admin only)
  Create a new agent profile (admin only)
  agent-profiles
• Patch an agent profile, deep-merging hr_record metadata (admin only)
  Patch an agent profile, deep-merging hr_record metadata (admin only)
  agent-profiles
• Transition an agent profile to a new lifecycle state (admin only)
  Transition an agent profile to a new lifecycle state (admin only)
  agent-profiles
• Get version history for an agent profile
  Get version history for an agent profile
  agent-profiles
• Build the delegation graph rooted at an agent
  Build the delegation graph rooted at an agent
  agent-profiles
• Onboard a new agent from the dashboard (admin/operator/developer)
  Onboard a new agent from the dashboard (admin/operator/developer)
  agent-bootstrap
• Terminate a delegated sub-agent (admin only)
  Terminate a delegated sub-agent (admin only)
  agent-profiles
• Dashboard GenAI explain bridge — route a freeform explain prompt
  Dashboard GenAI explain bridge — route a freeform explain prompt
  explain
• Live mesh-graph snapshot (nodes + aggregated edges)
  Live mesh-graph snapshot (nodes + aggregated edges)
  mesh
• Mesh-graph snapshot history (rolling 1–168h window)
  Mesh-graph snapshot history (rolling 1–168h window)
  mesh
• List forensic snapshots for the tenant (normalized for dashboard)
  List forensic snapshots for the tenant (normalized for dashboard)
  forensics
• Get a single forensic snapshot by ID
  Get a single forensic snapshot by ID
  forensics
• Delegate a sub-agent under a parent agent (admin only)
  Delegate a sub-agent under a parent agent (admin only)
  agent-profiles
• Idempotent OAuth user provisioning — create or fetch the caller's tenant + user from a verified Supabase JWT
  Idempotent OAuth user provisioning — create or fetch the caller's tenant + user from a verified Supabase JWT
  provision
• Resilient self-fetch — same as /provision but read-only-typed
  Resilient self-fetch — same as /provision but read-only-typed
  provision
• Link OAuth identity to a machine-registered tenant by consuming a claim token
  Link OAuth identity to a machine-registered tenant by consuming a claim token
  provision
• Confirm an OAuth device-code grant (browser-side, JWT-authenticated)
  Confirm an OAuth device-code grant (browser-side, JWT-authenticated)
  provision
• OpenAI-compatible chat completions — streaming + non-streaming, full ModelRouter pipeline (Thompson sampling, cascade, validity, budget commit)
  OpenAI-compatible chat completions — streaming + non-streaming, full ModelRouter pipeline (Thompson sampling, cascade, validity, budget commit)
  completions
• Anthropic-compatible messages endpoint — translates body to OpenAI format, runs the shared completions pipeline, translates the response back to Anthropic format
  Anthropic-compatible messages endpoint — translates body to OpenAI format, runs the shared completions pipeline, translates the response back to Anthropic format
  completions
• Token-validation probe for Anthropic-compatible clients (Claude for Excel/PowerPoint add-ins) — confirms the API key is accepted; does NOT list messages
  Token-validation probe for Anthropic-compatible clients (Claude for Excel/PowerPoint add-ins) — confirms the API key is accepted; does NOT list messages
  completions
• Anthropic Messages API with automatic MCP tool execution — explicit opt-in endpoint
  Anthropic Messages API with automatic MCP tool execution — explicit opt-in endpoint
  messagesmcp
• OAuth 2.0 PKCE authorize endpoint — returns app info for consent UI
  OAuth 2.0 PKCE authorize endpoint — returns app info for consent UI
  oauth
• OAuth 2.0 PKCE authorize POST — user approves, server issues code
  OAuth 2.0 PKCE authorize POST — user approves, server issues code
  oauth
• OAuth 2.0 PKCE token exchange — code + verifier → scoped API key
  OAuth 2.0 PKCE token exchange — code + verifier → scoped API key
  oauth
• Create or upsert a SCIM group
  Create or upsert a SCIM group
  scim
• Delete a SCIM group
  Delete a SCIM group
  scim
• Get a SCIM group by ID
  Get a SCIM group by ID
  scim
• List SCIM groups (filter + pagination)
  List SCIM groups (filter + pagination)
  scim
• Patch a SCIM group (Operations array)
  Patch a SCIM group (Operations array)
  scim
• Replace a SCIM group (PUT)
  Replace a SCIM group (PUT)
  scim
• SCIM 2.0 ResourceTypes
  SCIM 2.0 ResourceTypes
  scim
• SCIM 2.0 supported schemas
  SCIM 2.0 supported schemas
  scim
• SCIM 2.0 ServiceProviderConfig (RFC 7644 §4)
  SCIM 2.0 ServiceProviderConfig (RFC 7644 §4)
  scim
• Create or upsert a SCIM user
  Create or upsert a SCIM user
  scim
• Soft-delete a SCIM user (sets active=false)
  Soft-delete a SCIM user (sets active=false)
  scim
• Get a SCIM user by ID
  Get a SCIM user by ID
  scim
• List SCIM users (filter + pagination)
  List SCIM users (filter + pagination)
  scim
• Patch a SCIM user (Operations array)
  Patch a SCIM user (Operations array)
  scim
• Replace a SCIM user (PUT)
  Replace a SCIM user (PUT)
  scim
• Arrival manifest — one document a frontier model reads to understand what BR does and how to use it
  Arrival manifest — one document a frontier model reads to understand what BR does and how to use it
  discoveryagent-onboarding
• Behavior block for one capability — effects, cost shape, security profile, composition, recovery vocabulary
  Behavior block for one capability — effects, cost shape, security profile, composition, recovery vocabulary
  discoveryagent-onboarding
• A2A v1.0 agent card — capability discovery for A2A-aware peers and frontier models
  A2A v1.0 agent card — capability discovery for A2A-aware peers and frontier models
  discoverya2aagent-onboarding
• Open a negotiation session — mint signed liaison_id and SSE downlink URL
  Open a negotiation session — mint signed liaison_id and SSE downlink URL
  liaisonagent-onboarding
• Mint a signed pre-flight contract binding cost ceiling + prompt fingerprint
  Mint a signed pre-flight contract binding cost ceiling + prompt fingerprint
  liaisonbinding-contract
• Finalize a liaison — emit cost summary, trace digest, expire delegations
  Finalize a liaison — emit cost summary, trace digest, expire delegations
  liaison
• SSE stream of routing decisions and trace envelopes scoped to a liaison session
  SSE stream of routing decisions and trace envelopes scoped to a liaison session
  liaisonintelligence
• Mint a root capability grant (api_key auth; root scope ⊆ issuer effective scope)
  Mint a root capability grant (api_key auth; root scope ⊆ issuer effective scope)
  grantsdelegation
• Derive a child grant (identity == parent subject; double subset bound)
  Derive a child grant (identity == parent subject; double subset bound)
  grantsdelegation
• Revoke a grant (issuer / ancestor-subject; admin role: any; cascade default true)
  Revoke a grant (issuer / ancestor-subject; admin role: any; cascade default true)
  grantsdelegation
• Fetch a grant record + verified chain summary
  Fetch a grant record + verified chain summary
  grantsdelegation
• List grants for the tenant (filter by subject / status / root)
  List grants for the tenant (filter by subject / status / root)
  grantsdelegation
• Export the per-link-verifiable chain bundle (envelopes + signatures + JWKS ref)
  Export the per-link-verifiable chain bundle (envelopes + signatures + JWKS ref)
  grantsdelegation
• Standalone PDP: signed allow/deny verdict for a principal + requested scope
  Standalone PDP: signed allow/deny verdict for a principal + requested scope
  grantsdelegationpdp

How to call

https://api.brainstormrouter.com

Listed in

Directories this entry was found in.