API Surface Map

Source of truth:

internal/server/routes_public.go
internal/server/routes_protected.go

Snapshot (2026-03-31)

From active route registration:

Total method+path routes: 392
Unique paths (ignoring method): 293
/api/v1/* paths: 30
/api/v2/* paths: 256
Non-API infra paths: /healthz, /readyz, /metrics, /git/r/..., /v2/*

Method distribution:

GET: 166
POST: 138
PUT: 36
PATCH: 6
DELETE: 46

How to Regenerate

Run route extraction from the backend repo after changes and refresh this page:

rg --no-filename -o '"(GET|POST|PUT|PATCH|DELETE) [^"]+"' internal/server/routes_*.go | tr -d '"' | sort -u

Endpoint Groups

Group	Route Prefix	Notes
Auth and identity	`/api/v1/auth/*`	login, refresh, OAuth, MFA
Organizations	`/api/v1/organizations/*`	org CRUD, members, invitations
Projects core	`/api/v2/projects/*`	project CRUD, files, releases, delivery, bindings
Tenants	`/api/v2/projects/{slug}/tenants`, `/api/v2/tenants/`	tenant lifecycle, services, values, rollback
Registry and catalog	`/api/v2/org-charts/`, `/org-kustomize-bases/`, `/org-manifest-bundles/*`	artifact CRUD/edit/version
OCI	`/v2/*`	OCI distribution API for chart push/pull
Clusters and agent hub	`/api/v2/clusters/`, `/api/v2/agent-bindings/`	registration, inventory, drift, commands, credentials
IAM center	`/api/v2/teams/`, `/permissions/`, `/approval-policies`, `/api/v2/iam/`	action-based RBAC and approval governance
Policies	`/api/v2/policies/*`	values governance sets/assignments/evaluation/compliance
Notifications and webhooks	`/api/v2/projects/{slug}/webhooks`, `/api/v2/notifications/`, `/api/v1/webhooks/*`	outbound channels + inbound signed webhooks
Platform config surfaces	`/api/v2/org/environments`, `/api/v2/org/tenants`, `/api/v2/features`	org runtime configuration and plan/feature introspection

High-Impact Flow Endpoints

Delivery and release

POST /api/v2/projects/{slug}/releases
POST /api/v2/releases/{id}/approve
POST /api/v2/releases/{id}/deploy
GET /api/v2/projects/{slug}/delivery/preview
POST /api/v2/projects/{slug}/delivery/generate

Promotion and rollback

POST /api/v2/projects/{slug}/promotion/request
POST /api/v2/promotions/{id}/approve
POST /api/v2/tenants/{id}/envs/{env}/rollback/preview
POST /api/v2/tenants/{id}/envs/{env}/rollback

Governance and audit

POST /api/v2/approval-policies
POST /api/v2/policies/evaluate
GET /api/v2/audit-logs
GET /api/v2/iam/audit-events
GET /api/v2/iam/audit-report

Agent operations

POST /api/v2/clusters/{id}/join-token
POST /api/v2/clusters/{id}/rotate-token
GET /api/v2/clusters/{id}/drift
POST /api/v2/clusters/{id}/commands

This page is intentionally a route map, not a contract schema. For request/response payloads and workflow semantics, use the module documentation pages (deployment, platform, governance, operations) and update them together with router changes.