Eden REST API
Service REST operation catalog
ProtocolREST / JSON
Base path
/api/v1AuthenticationBearer token
This lists every recognized utoipa::path handler annotation in Eden Service production source. It spans optional features and both datastore profiles; a declaration does not prove a route is mounted or included in a particular build's OpenAPI assembler. Runtime-mounted families and programmatically assembled schema paths also exist. Use the running service's full specification for its registered request bodies, response schemas, parameters, security and operation IDs. A missing operation ID in source is shown as the handler name; the assembled spec can override it. The JSON catalog preserves full annotations and attached cfg conditions. See OpenAPI discovery.
Annotated operations: 488.
| Method | Path | Operation / handler | Description | Source |
|---|---|---|---|---|
| POST | /api/v1/admin/llm/marketplace/import | import_skill | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/marketplace.rs:603 |
| POST | /api/v1/admin/llm/marketplace/update/{skill_id} | update_marketplace_skill | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/marketplace.rs:784 |
| GET | /api/v1/admin/llm/marketplace/updates | check_updates | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/marketplace.rs:728 |
| GET | /api/v1/admin/llm/skills | list_admin_skills | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/admin.rs:288 |
| POST | /api/v1/admin/llm/skills | create_skill | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/admin.rs:318 |
| DELETE | /api/v1/admin/llm/skills/{skill_id} | delete_skill | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/admin.rs:509 |
| PATCH | /api/v1/admin/llm/skills/{skill_id} | update_skill | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/admin.rs:407 |
| GET | /api/v1/admin/llm/system-prompts | list_prompts | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/admin.rs:98 |
| PUT | /api/v1/admin/llm/system-prompts/{prompt_key} | upsert_prompt | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/admin.rs:127 |
| GET | /api/v1/agents | list_agent_catalog | eden_service/src/comm/llm/agent_catalog.rs:36 | |
| GET | /api/v1/analytics/anomalies/status | get_anomaly_status | Get anomaly detector status | eden_service/src/comm/anomaly_status.rs:78 |
| GET | /api/v1/analytics/clickhouse | export_clickhouse_telemetry | Export telemetry | eden_service/src/comm/telemetry_analytics.rs:741 |
| GET | /api/v1/analytics/clickhouse/{signal} | export_clickhouse_telemetry_signal | Export one telemetry signal | eden_service/src/comm/telemetry_analytics.rs:778 |
| GET | /api/v1/analytics/fleet/signals | get_fleet_signals | Get fleet health signals | eden_service/src/comm/fleet_signals.rs:175 |
| GET | /api/v1/analytics/status | get_analytics_status | Get analytics service status | eden_service/src/comm/analytics.rs:179 |
| GET | /api/v1/analytics/telemetry | export_telemetry | Export telemetry | eden_service/src/comm/telemetry_analytics.rs:667 |
| GET | /api/v1/analytics/telemetry/status | get_telemetry_provider_status | GET /api/v1/analytics/telemetry/status returns authenticated provider guard metadata. Installation and successful historical queries never become completeness proof. | eden_service/src/comm/telemetry_analytics.rs:605 |
| GET | /api/v1/analytics/telemetry/{signal} | export_telemetry_signal | Export one telemetry signal | eden_service/src/comm/telemetry_analytics.rs:703 |
| GET | /api/v1/apis | list_apis | Get an Api Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/apis/get.rs:120 |
| POST | /api/v1/apis | create_api | Create a Template Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/apis/post.rs:49 |
| GET | /api/v1/apis/updated | list_apis_updated | Get an Api Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/apis/get.rs:148 |
| DELETE | /api/v1/apis/{api} | delete_api | Delete (disconnect) a Api Permissions: 'ControlPerms::CONFIGURE' on the Api or Organization | eden_service/src/comm/apis/delete.rs:34 |
| DELETE | /api/v1/apis/{api} | delete | Delete a migration and detach any runtime interlay state that pointed at it. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/delete.rs:50 |
| GET | /api/v1/apis/{api} | get_api | Get an Api Permissions: 'ControlPerms::CONFIGURE' on the Api or Organization | eden_service/src/comm/apis/get.rs:34 |
| PATCH | /api/v1/apis/{api} | update_api | Partially update an API. Only the fields present in the body are changed; the API's 'uuid', 'created_by', and 'created_at' are preserved (the underlying 'INSERT … ON CONFLICT DO UPDATE' upsert never overwrites them). 'bindings' resolve template id → uuid exactly like create. Permissions: 'ControlPerms::CONFIGURE' on the API or Organization | eden_service/src/comm/apis/patch.rs:37 |
| POST | /api/v1/apis/{api} | run_api | Run an API with simple sequential execution and enhanced nested field support Permissions: 'ControlPerms::CONFIGURE' on the Api or Organization | eden_service/src/comm/apis/run.rs:97 |
| POST | /api/v1/auth/agents/login | auth_agent_login | Exchange an agent API key for a JWT token. Behavior: - Requires 'X-Org-Id' or 'X-Org-Uuid' request header to scope authentication. - Resolves the agent service identity by '(username, organization)' and verifies the provided API key. - Verifies the agent still has RBAC access in the target organization. - Returns '401 Unauthorized' for invalid API keys or missing org access. - Returns server/database errors for infrastructure failures. | eden_service/src/comm/auth/agent_login.rs:246 |
| POST | /api/v1/auth/login | auth_login | Return JWT Token from Login | eden_service/src/comm/auth/login.rs:126 |
| POST | /api/v1/auth/refresh | auth_refresh | Refresh JWT Token for Login | eden_service/src/comm/auth/login.rs:197 |
| GET | /api/v1/backups | list_backups | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/backups/list.rs:37 |
| GET | /api/v1/backups | list | eden_service/src/comm/backups/list.rs:77 | |
| POST | /api/v1/backups | create_backup | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/backups/post.rs:56 |
| POST | /api/v1/backups | post | eden_service/src/comm/backups/post.rs:123 | |
| DELETE | /api/v1/backups/{timestamp} | delete_backup | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/backups/delete.rs:43 |
| DELETE | /api/v1/backups/{timestamp} | delete | eden_service/src/comm/backups/delete.rs:95 | |
| GET | /api/v1/backups/{timestamp}/download | download | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/backups/download.rs:45 |
| GET | /api/v1/backups/{timestamp}/download | download | eden_service/src/comm/backups/download.rs:168 | |
| GET | /api/v1/control-plane/http3/metrics | get_http3_gateway_metrics | Exposes the bounded, payload-free HTTP/3 gateway snapshot through the authenticated HA control API. Disabled profiles deliberately return 404. | eden_service/src/production_ha.rs:430 |
| GET | /api/v1/control-plane/networks | list_control_plane_networks | eden_service/src/comm/control_plane.rs:218 | |
| POST | /api/v1/control-plane/networks | create_control_plane_network | eden_service/src/comm/control_plane.rs:241 | |
| PUT | /api/v1/control-plane/networks/{network_uuid} | put_control_plane_network | eden_service/src/comm/control_plane.rs:264 | |
| GET | /api/v1/control-plane/networks/{network_uuid}/members | list_control_plane_network_members | eden_service/src/comm/control_plane.rs:331 | |
| POST | /api/v1/control-plane/networks/{network_uuid}/membership-operations | submit_control_plane_membership_operation | eden_service/src/comm/control_plane.rs:386 | |
| GET | /api/v1/control-plane/operations/{operation_uuid} | get_control_plane_operation | eden_service/src/comm/control_plane.rs:357 | |
| GET | /api/v1/endpoint-comparisons/arenas | list_arenas | eden_service/src/comm/endpoint_comparison.rs:1060 | |
| POST | /api/v1/endpoint-comparisons/arenas | create_arena | eden_service/src/comm/endpoint_comparison.rs:1021 | |
| DELETE | /api/v1/endpoint-comparisons/arenas/{arena} | delete_arena | eden_service/src/comm/endpoint_comparison.rs:1185 | |
| GET | /api/v1/endpoint-comparisons/arenas/{arena} | get_arena | eden_service/src/comm/endpoint_comparison.rs:1078 | |
| PATCH | /api/v1/endpoint-comparisons/arenas/{arena} | update_arena | eden_service/src/comm/endpoint_comparison.rs:1094 | |
| POST | /api/v1/endpoint-comparisons/arenas/{arena}/runs | start_run | eden_service/src/comm/endpoint_comparison.rs:1217 | |
| GET | /api/v1/endpoint-comparisons/runs | list_runs | eden_service/src/comm/endpoint_comparison.rs:1285 | |
| GET | /api/v1/endpoint-comparisons/runs/{run} | get_run | eden_service/src/comm/endpoint_comparison.rs:1306 | |
| POST | /api/v1/endpoint-comparisons/runs/{run}/complete | complete_run | eden_service/src/comm/endpoint_comparison.rs:2225 | |
| POST | /api/v1/endpoint-comparisons/runs/{run}/completion/preflight | completion_preflight | eden_service/src/comm/endpoint_comparison.rs:2205 | |
| POST | /api/v1/endpoint-comparisons/runs/{run}/pause | pause_run | eden_service/src/comm/endpoint_comparison.rs:1390 | |
| GET | /api/v1/endpoint-comparisons/runs/{run}/requests | list_requests | eden_service/src/comm/endpoint_comparison.rs:3058 | |
| GET | /api/v1/endpoint-comparisons/runs/{run}/requests/{comparison_request_id} | get_request | eden_service/src/comm/endpoint_comparison.rs:3098 | |
| POST | /api/v1/endpoint-comparisons/runs/{run}/resume | resume_run | eden_service/src/comm/endpoint_comparison.rs:1410 | |
| POST | /api/v1/endpoint-comparisons/runs/{run}/stop | stop_run | eden_service/src/comm/endpoint_comparison.rs:1430 | |
| GET | /api/v1/endpoint-comparisons/runs/{run}/summary | get_summary | eden_service/src/comm/endpoint_comparison.rs:2637 | |
| GET | /api/v1/endpoint-comparisons/runs/{run}/timeseries | get_timeseries | eden_service/src/comm/endpoint_comparison.rs:2889 | |
| GET | /api/v1/endpoint-groups | get_all_endpoint_groups | Get all Endpoint Groups for an organization Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoint_groups/get.rs:74 |
| POST | /api/v1/endpoint-groups | create_endpoint_group | Create an Endpoint Group Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoint_groups/post.rs:28 |
| DELETE | /api/v1/endpoint-groups/{group} | delete_endpoint_group | Delete an Endpoint Group Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoint_groups/delete.rs:27 |
| GET | /api/v1/endpoint-groups/{group} | get_endpoint_group | Get an Endpoint Group Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoint_groups/get.rs:27 |
| PATCH | /api/v1/endpoint-groups/{group} | update_endpoint_group | Update an Endpoint Group Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoint_groups/patch.rs:28 |
| POST | /api/v1/endpoint-groups/{group}/members | add_endpoint_group_member | Add a member endpoint to an endpoint group Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoint_groups/members.rs:36 |
| DELETE | /api/v1/endpoint-groups/{group}/members/{endpoint} | remove_endpoint_group_member | Remove a member endpoint from an endpoint group Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoint_groups/members.rs:99 |
| GET | /api/v1/endpoints | list_endpoints | List all endpoints for the organization Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/list.rs:105 |
| POST | /api/v1/endpoints | create_endpoint | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/post.rs:62 |
| POST | /api/v1/endpoints/google-workspace/oauth/exchange | exchange_google_workspace_oauth_code | eden_service/src/comm/endpoints/google_workspace_oauth.rs:43 | |
| GET | /api/v1/endpoints/updated | list_endpoints_updated | List all endpoints for the organization that have been updated recently Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/list.rs:159 |
| DELETE | /api/v1/endpoints/{endpoint_uuid}/credentials/database | delete_db_credential | Delete the caller's database credential | eden_service/src/comm/db_credentials.rs:732 |
| GET | /api/v1/endpoints/{endpoint_uuid}/credentials/database | get_db_credential | Get the caller's database credential metadata | eden_service/src/comm/db_credentials.rs:637 |
| PUT | /api/v1/endpoints/{endpoint_uuid}/credentials/database | set_db_credential | Set the caller's database credential | eden_service/src/comm/db_credentials.rs:370 |
| POST | /api/v1/endpoints/{endpoint_uuid}/credentials/database/rotations | rotate_db_credential | Start durable database credential rotation | eden_service/src/comm/db_credentials.rs:479 |
| GET | /api/v1/endpoints/{endpoint_uuid}/credentials/database/rotations/{rotation_id} | get_db_credential_rotation | Get durable credential rotation state | eden_service/src/comm/db_credentials.rs:600 |
| GET | /api/v1/endpoints/{endpoint_uuid}/credentials/database/users | list_endpoint_db_credentials | List password-free endpoint credential inventory | eden_service/src/comm/db_credentials.rs:683 |
| DELETE | /api/v1/endpoints/{endpoint} | delete_endpoint | Delete (disconnect) from an Endpoint Permissions: See exact permission-bit checks in the handler body. TODO add a telemetry_error macro that sets the span status to ERROR if returning an error TODO add a endpoint_request_error macro that makes sure to run 'finish_request()' on an error | eden_service/src/comm/endpoints/delete.rs:89 |
| GET | /api/v1/endpoints/{endpoint} | get_endpoint | Get an Endpoint Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/get.rs:28 |
| PATCH | /api/v1/endpoints/{endpoint} | update_endpoint | Update an Endpoint Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/patch.rs:60 |
| GET | /api/v1/endpoints/{endpoint}/analytics/audit-trail | get_endpoint_audit_trail | Get tenant-scoped endpoint audit history | eden_service/src/comm/endpoint_analytics.rs:436 |
| GET | /api/v1/endpoints/{endpoint}/analytics/metrics | get_endpoint_metrics | Get endpoint performance metrics | eden_service/src/comm/endpoint_analytics.rs:239 |
| GET | /api/v1/endpoints/{endpoint}/analytics/pii | get_endpoint_pii_detections | Get endpoint PII detections | eden_service/src/comm/endpoint_analytics.rs:373 |
| GET | /api/v1/endpoints/{endpoint}/index-advice | get_endpoint_index_advice | Read the latest cached PostgreSQL index advice snapshot. Permissions: Same read checks as live metadata collection. | eden_service/src/comm/endpoints/metadata.rs:618 |
| GET | /api/v1/endpoints/{endpoint}/metadata | get_endpoint_metadata | Manual metadata data from an Endpoint with gRPC Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/metadata.rs:267 |
| GET | /api/v1/endpoints/{endpoint}/metadata/cache | get_endpoint_cached_metadata | Read the latest scheduled metadata batch for an endpoint from the internal cache. Permissions: Same read checks as live metadata collection. | eden_service/src/comm/endpoints/metadata.rs:410 |
| POST | /api/v1/endpoints/{endpoint}/metadata/collect | collect_endpoint_metadata | Trigger an immediate metadata collection for specific packages Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/metadata.rs:703 |
| GET | /api/v1/endpoints/{endpoint}/metadata/collectors | get_endpoint_metadata_collectors | List available collectors for an endpoint Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/metadata.rs:343 |
| GET | /api/v1/endpoints/{endpoint}/nodes | list_endpoint_nodes | eden_service/src/comm/endpoints/nodes.rs:131 | |
| PUT | /api/v1/endpoints/{endpoint}/nodes/{eden_node_uuid} | assign_endpoint_node | eden_service/src/comm/endpoints/nodes.rs:163 | |
| POST | /api/v1/endpoints/{endpoint}/read | read_endpoint | Read data from an Endpoint with gRPC Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/read.rs:79 |
| GET | /api/v1/endpoints/{endpoint}/tools | get_endpoint_tools_servers | List of tool servers for an endpoint Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/tools.rs:36 |
| POST | /api/v1/endpoints/{endpoint}/transaction | endpoint_transaction | Transactional request from an Endpoint (requires write permissions) Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/transaction.rs:38 |
| GET | /api/v1/endpoints/{endpoint}/workload-diagnostics | get_endpoint_workload_diagnostics | Read the latest tenant-safe PostgreSQL workload diagnostics snapshot. Permissions: Same read checks as live metadata collection. | eden_service/src/comm/endpoints/metadata.rs:532 |
| POST | /api/v1/endpoints/{endpoint}/write | write_endpoint | Write data from an Endpoint with gRPC Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/write.rs:54 |
| POST | /api/v1/functions | create_function_endpoint | Create a Function endpoint (Lambda provider via endpoint config) | eden_service/src/comm/functions.rs:42 |
| POST | /api/v1/functions/{endpoint}/invoke | invoke_function_endpoint | Invoke a function endpoint using the standard endpoint request envelope Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/functions.rs:94 |
| GET | /api/v1/ha/deployment/nodes | get_ha_deployment_nodes | eden_service/src/comm/ha.rs:176 | |
| GET | /api/v1/help | help | eden_service/src/comm/lib.rs:17 | |
| GET | /api/v1/iam/access/endpoints/{endpoint} | get_my_endpoint_access | Get the caller's resolved control-plane and data-plane access for an endpoint. | eden_service/src/comm/iam/endpoints/access.rs:61 |
| GET | /api/v1/iam/agents | list_agents | List all agent service identities in the organization. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/agents/list.rs:27 |
| POST | /api/v1/iam/agents | create_agent | Create a new agent service identity. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/agents/post.rs:48 |
| DELETE | /api/v1/iam/agents/{agent} | delete_agent | Delete an agent service identity. 1. Validate authentication & authorization (Admin required) 2. Check resource exists (return 204 if already deleted) 3. Delete RBAC permissions 4. Delete persisted agent row from PostgreSQL 5. Attempt synchronous cache invalidation; if it fails, enqueue async retry with backoff 6. Return 204 No Content Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/agents/delete.rs:52 |
| GET | /api/v1/iam/agents/{agent} | get_agent | Get an agent service identity. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/agents/get.rs:39 |
| PATCH | /api/v1/iam/agents/{agent} | update_agent | Update an existing agent service identity. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/agents/patch.rs:66 |
| POST | /api/v1/iam/agents/{agent}/rotate-key | rotate_agent_api_key | Rotate API key for an existing agent service identity. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/agents/rotate_key.rs:50 |
| GET | /api/v1/iam/auth-groups | list_auth_groups | List organization auth groups | eden_service/src/comm/iam/auth_groups.rs:118 |
| POST | /api/v1/iam/auth-groups | upsert_auth_group | Create or reconcile an auth group | eden_service/src/comm/iam/auth_groups.rs:149 |
| DELETE | /api/v1/iam/auth-groups/{group_uuid} | delete_auth_group | Delete an auth group | eden_service/src/comm/iam/auth_groups.rs:289 |
| GET | /api/v1/iam/auth-groups/{group_uuid} | get_auth_group | Get an auth group | eden_service/src/comm/iam/auth_groups.rs:257 |
| GET | /api/v1/iam/auth-groups/{group_uuid}/members | list_auth_group_members | List auth-group members | eden_service/src/comm/iam/auth_groups.rs:378 |
| DELETE | /api/v1/iam/auth-groups/{group_uuid}/members/{member_kind}/{member_uuid} | remove_auth_group_member | Remove an auth-group member | eden_service/src/comm/iam/auth_groups.rs:524 |
| PUT | /api/v1/iam/auth-groups/{group_uuid}/members/{member_kind}/{member_uuid} | put_auth_group_member | Add or reconcile an auth-group member | eden_service/src/comm/iam/auth_groups.rs:424 |
| DELETE | /api/v1/iam/control/endpoints/{endpoint} | delete_rbac_endpoint | Permissions: 'ControlPerms::GRANT | ControlPerms::DESTROY' on Organization | eden_service/src/comm/iam/rbac/endpoints/delete.rs:34 |
| GET | /api/v1/iam/control/endpoints/{endpoint} | get_rbac_endpoint | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/endpoints/get.rs:29 |
| DELETE | /api/v1/iam/control/endpoints/{endpoint}/subjects/{subject} | delete_rbac_endpoint_subject | Permissions: 'ControlPerms::GRANT | subject_bits' on Organization | eden_service/src/comm/iam/rbac/endpoints/subjects/delete.rs:31 |
| GET | /api/v1/iam/control/endpoints/{endpoint}/subjects/{subject} | get_rbac_endpoint_subject | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/endpoints/subjects/get.rs:30 |
| PUT | /api/v1/iam/control/endpoints/{endpoint}/subjects/{subject} | put_control_endpoint_subject | Set one subject's exact endpoint control-plane permissions. Permissions: 'ControlPerms::GRANT | granted_bits' on Organization | eden_service/src/comm/iam/control.rs:154 |
| DELETE | /api/v1/iam/control/organizations | delete_rbac_organization | Permissions: 'ControlPerms::GRANT | ControlPerms::DESTROY' on Organization | eden_service/src/comm/iam/rbac/organizations/delete.rs:24 |
| GET | /api/v1/iam/control/organizations | get_rbac_organization | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/organizations/get.rs:25 |
| DELETE | /api/v1/iam/control/organizations/subjects/{subject} | delete_rbac_organization_subject | Permissions: 'ControlPerms::GRANT | subject_bits' on Organization | eden_service/src/comm/iam/rbac/organizations/subjects/delete.rs:34 |
| GET | /api/v1/iam/control/organizations/subjects/{subject} | get_rbac_organization_subject | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/organizations/subjects/get.rs:27 |
| PUT | /api/v1/iam/control/organizations/subjects/{subject} | put_control_organization_subject | Set one subject's exact organization control-plane permissions. Permissions: 'ControlPerms::GRANT | granted_bits' on Organization | eden_service/src/comm/iam/control.rs:85 |
| DELETE | /api/v1/iam/control/subjects/{subject} | delete_rbac_subject | Permissions: 'ControlPerms::GRANT | ControlPerms::DESTROY' on Organization | eden_service/src/comm/iam/rbac/subjects/delete.rs:27 |
| GET | /api/v1/iam/control/subjects/{subject} | get_rbac_subject | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/subjects/get.rs:26 |
| GET | /api/v1/iam/control/subjects/{subject}/endpoints | get_rbac_subject_endpoints | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/subjects/endpoints.rs:27 |
| GET | /api/v1/iam/control/subjects/{subject}/organizations | get_rbac_subject_organizations | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/subjects/organizations.rs:27 |
| GET | /api/v1/iam/control/subjects/{subject}/templates | get_rbac_subject_templates | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/subjects/templates.rs:27 |
| GET | /api/v1/iam/control/subjects/{subject}/workflows | get_rbac_subject_workflows | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/subjects/workflows.rs:27 |
| DELETE | /api/v1/iam/control/templates/{template} | delete_rbac_template | Permissions: 'ControlPerms::GRANT | ControlPerms::DESTROY' on Organization | eden_service/src/comm/iam/rbac/templates/delete.rs:30 |
| GET | /api/v1/iam/control/templates/{template} | get_rbac_template | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/templates/get.rs:29 |
| DELETE | /api/v1/iam/control/templates/{template}/subjects/{subject} | delete_rbac_template_subject | Permissions: 'ControlPerms::GRANT | subject_bits' on Organization | eden_service/src/comm/iam/rbac/templates/subjects/delete.rs:31 |
| GET | /api/v1/iam/control/templates/{template}/subjects/{subject} | get_rbac_template_subject | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/templates/subjects/get.rs:29 |
| PUT | /api/v1/iam/control/templates/{template}/subjects/{subject} | put_control_template_subject | Set one subject's exact template control-plane permissions. Permissions: 'ControlPerms::GRANT | granted_bits' on Organization | eden_service/src/comm/iam/control.rs:232 |
| DELETE | /api/v1/iam/control/workflows/{workflow} | delete_rbac_workflow | Permissions: 'ControlPerms::GRANT | ControlPerms::DESTROY' on Organization | eden_service/src/comm/iam/rbac/workflows/delete.rs:30 |
| GET | /api/v1/iam/control/workflows/{workflow} | get_rbac_workflow | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/workflows/get.rs:29 |
| DELETE | /api/v1/iam/control/workflows/{workflow}/subjects/{subject} | delete_rbac_workflow_subject | Permissions: 'ControlPerms::GRANT | subject_bits' on Organization | eden_service/src/comm/iam/rbac/workflows/subjects/delete.rs:31 |
| GET | /api/v1/iam/control/workflows/{workflow}/subjects/{subject} | get_rbac_workflow_subject | Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/rbac/workflows/subjects/get.rs:29 |
| PUT | /api/v1/iam/control/workflows/{workflow}/subjects/{subject} | put_control_workflow_subject | Set one subject's exact workflow control-plane permissions. Permissions: 'ControlPerms::GRANT | granted_bits' on Organization | eden_service/src/comm/iam/control.rs:309 |
| DELETE | /api/v1/iam/data/endpoints/{endpoint} | delete_data_endpoint | Remove all shared runtime grants on an endpoint. Permissions: 'ControlPerms::GRANT | ControlPerms::DESTROY' on Organization | eden_service/src/comm/iam/data.rs:375 |
| GET | /api/v1/iam/data/endpoints/{endpoint} | get_data_endpoint | List all shared runtime grants on an endpoint. Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/data.rs:107 |
| DELETE | /api/v1/iam/data/endpoints/{endpoint}/subjects/{subject} | delete_data_endpoint_subject | Revoke one subject's shared runtime perms on an endpoint. Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/data.rs:291 |
| GET | /api/v1/iam/data/endpoints/{endpoint}/subjects/{subject} | get_data_endpoint_subject | Get one subject's exact shared runtime perms on an endpoint. Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/data.rs:146 |
| PUT | /api/v1/iam/data/endpoints/{endpoint}/subjects/{subject} | put_data_endpoint_subject | Set one subject's exact shared runtime perms on an endpoint. Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/data.rs:196 |
| DELETE | /api/v1/iam/data/subjects/{subject} | delete_data_subject | Remove all shared runtime grants for a subject across endpoints. Permissions: 'ControlPerms::GRANT | ControlPerms::DESTROY' on Organization | eden_service/src/comm/iam/data.rs:463 |
| GET | /api/v1/iam/data/subjects/{subject}/endpoints | get_data_subject_endpoints | List all shared runtime grants for one subject across endpoints. Permissions: 'ControlPerms::GRANT' on Organization | eden_service/src/comm/iam/data.rs:428 |
| DELETE | /api/v1/iam/els/endpoints/{endpoint}/policies | delete_all_els_policies | Delete all ELS policies for an endpoint (cascades to assignments). DELETE '/{endpoint}/els/policies' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:402 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/policies | list_els_policies | List all ELS policies for an endpoint. GET '/{endpoint}/els/policies' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:308 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/policies | create_els_policy | Create a named ELS policy for an endpoint. POST '/{endpoint}/els/policies' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:213 |
| DELETE | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid} | delete_els_policy | Delete an ELS policy (cascades to assignments). DELETE '/{endpoint}/els/policies/{policy_uuid}' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:370 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid} | get_els_policy | Get a specific ELS policy. GET '/{endpoint}/els/policies/{policy_uuid}' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:276 |
| PUT | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid} | update_els_policy | Update an ELS policy (re-caches sync'd users). PUT '/{endpoint}/els/policies/{policy_uuid}' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:338 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/pointer | get_els_pointer | Get the active version pointer for a policy. GET '/{endpoint}/els/policies/{policy_uuid}/pointer' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:811 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/versions | list_els_versions | List all versions for a policy (newest first). GET '/{endpoint}/els/policies/{policy_uuid}/versions' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:712 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/versions | create_els_version | Create a new draft version for a policy. POST '/{endpoint}/els/policies/{policy_uuid}/versions' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:678 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/versions/active | get_active_els_version | Get the currently active version directly. GET '/{endpoint}/els/policies/{policy_uuid}/versions/active' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:744 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/versions/{version} | get_els_version | Get a specific version of a policy. GET '/{endpoint}/els/policies/{policy_uuid}/versions/{version}' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:781 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/versions/{version}/promote | promote_els_version | Promote a draft version to active. POST '/{endpoint}/els/policies/{policy_uuid}/versions/{version}/promote' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:844 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/versions/{version}/reject | reject_els_version | Reject a draft version. POST '/{endpoint}/els/policies/{policy_uuid}/versions/{version}/reject' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:875 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/policies/{policy_uuid}/versions/{version}/rollback | rollback_els_version | Rollback to a previously superseded version. POST '/{endpoint}/els/policies/{policy_uuid}/versions/{version}/rollback' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:904 |
| DELETE | /api/v1/iam/els/endpoints/{endpoint}/users | unassign_all_els_users | Unassign all users from ELS policies for an endpoint. DELETE '/{endpoint}/els/users' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:617 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/users | list_els_user_assignments | List all user assignments for an endpoint. GET '/{endpoint}/els/users' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:555 |
| PUT | /api/v1/iam/els/endpoints/{endpoint}/users | assign_els_users_bulk | Assign a policy to many users at once. PUT '/{endpoint}/els/users' | eden_service/src/comm/endpoints/els.rs:465 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/users/unassign | bulk_unassign_els_users | Unassign selected users from ELS policies for an endpoint. POST '/{endpoint}/els/users/unassign' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:645 |
| DELETE | /api/v1/iam/els/endpoints/{endpoint}/users/{user_uuid} | unassign_els_user | Unassign a user from their ELS policy. DELETE '/{endpoint}/els/users/{user_uuid}' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:585 |
| GET | /api/v1/iam/els/endpoints/{endpoint}/users/{user_uuid} | get_els_user_policy | Get a user's effective (resolved) ELS policy. GET '/{endpoint}/els/users/{user_uuid}' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:494 |
| PUT | /api/v1/iam/els/endpoints/{endpoint}/users/{user_uuid} | assign_els_user | Assign a policy to a user. PUT '/{endpoint}/els/users/{user_uuid}' Body: '{ "policy_uuid": "...", "mode": "sync" }' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:435 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/users/{user_uuid}/refresh | refresh_copy_mode_els_user | Refresh a copy-mode assignment from the policy's current effective config. POST '/{endpoint}/els/users/{user_uuid}/refresh' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:525 |
| POST | /api/v1/iam/els/endpoints/{endpoint}/validate | validate_els_policy | Validate an ELS strategy/config pair for an endpoint without storing it. POST '/{endpoint}/els/validate' Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/endpoints/els.rs:244 |
| POST | /api/v1/iam/external-permissions/aws/template-check | check_aws_iam_external_permission_with_template | eden_service/src/comm/iam/external_permission.rs:583 | |
| GET | /api/v1/iam/humans | get_all_humans | Get all IAM users in the organization Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/users/get.rs:238 |
| POST | /api/v1/iam/humans | create_human | Create a New IAM User (user must not exist) Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/users/post.rs:51 |
| GET | /api/v1/iam/humans/me | get_current_human | Get the authenticated user's profile | eden_service/src/comm/iam/users/me.rs:51 |
| PATCH | /api/v1/iam/humans/me | update_current_human | Update the authenticated user's profile | eden_service/src/comm/iam/users/me.rs:149 |
| GET | /api/v1/iam/humans/me/analytics-prefs | get_analytics_prefs | Get the authenticated user's saved analytics dashboard preferences. | eden_service/src/comm/iam/users/analytics_prefs.rs:42 |
| PUT | /api/v1/iam/humans/me/analytics-prefs | put_analytics_prefs | Replace the authenticated user's analytics dashboard preferences. | eden_service/src/comm/iam/users/analytics_prefs.rs:74 |
| DELETE | /api/v1/iam/humans/{human} | delete_human | Delete an IAM User 1. Validate authentication & authorization 2. Check resource exists (return 204 if already deleted) 3. Delete RBAC permissions from database 4. Invalidate cache (with retry logic) 5. Return 204 No Content Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/users/delete.rs:55 |
| GET | /api/v1/iam/humans/{human} | get_human | Get an IAM User Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/users/get.rs:42 |
| PATCH | /api/v1/iam/humans/{human} | update_human | Update an existing IAM User | eden_service/src/comm/iam/users/patch.rs:66 |
| GET | /api/v1/iam/security/endpoints/{endpoint} | get_endpoint_security_summary | Get a redacted IAM credentials summary for an endpoint. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/iam/endpoints/get.rs:36 |
| GET | /api/v1/iam/sessions | list_sessions | Get Active Sessions Returns a list of all active sessions for the current user. Sessions are identified by JTI (JWT ID) when using bearer auth, or by IP/UA for legacy sessions. | eden_service/src/comm/iam/sessions/get.rs:42 |
| GET | /api/v1/iam/sessions/history | get_session_history | Get Session History Returns historical session data for the current user from ClickHouse. This includes sessions that have ended (logged out, expired, or revoked). Note: Session history is only available when ClickHouse analytics is enabled. | eden_service/src/comm/iam/sessions/history.rs:118 |
| POST | /api/v1/iam/sessions/revoke-all | revoke_all_sessions | Revoke All Sessions Revokes all active sessions for the current user, including the current session. After this call, the user will need to log in again. The JWT token will be blacklisted until it expires, preventing further use. | eden_service/src/comm/iam/sessions/revoke.rs:219 |
| POST | /api/v1/iam/sessions/revoke-others | revoke_other_sessions | Revoke Other Sessions Revokes all active sessions for the current user except the current session. This is useful for security purposes when a user suspects unauthorized access. The JWT tokens for revoked sessions are blacklisted until they expire. | eden_service/src/comm/iam/sessions/revoke.rs:65 |
| GET | /api/v1/iam/usage | get_api_usage | Get API Usage History Returns API request history for the current user from ClickHouse. Includes request details, latencies, and error information. Note: API usage history requires ClickHouse analytics to be enabled. | eden_service/src/comm/iam/sessions/usage.rs:143 |
| GET | /api/v1/interlays | list_interlays | Get an Interlay Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/get.rs:85 |
| POST | /api/v1/interlays | create_interlay | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/post.rs:185 |
| GET | /api/v1/interlays/updated | list_interlays_updated | Get an Interlay Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/get.rs:113 |
| DELETE | /api/v1/interlays/{interlay} | delete_interlay | Delete (disconnect) a Api Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/delete.rs:535 |
| GET | /api/v1/interlays/{interlay} | get_interlay | Get an Interlay Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/get.rs:34 |
| PATCH | /api/v1/interlays/{interlay} | patch_interlay | Update an existing Interlay Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/patch.rs:247 |
| GET | /api/v1/interlays/{interlay}/analysis/timeseries | get_interlay_analysis_timeseries | 'GET /interlays/{interlay}/analysis/timeseries?range=1h' Returns one-minute CPU / memory / ops-per-sec buckets for the interlay's source endpoint over the requested lookback window. Resolution is scoped to the authenticated organization, including explicit shared membership, before any telemetry backend is inspected. | eden_service/src/comm/interlays/analysis_timeseries.rs:256 |
| GET | /api/v1/interlays/{interlay}/analysis/timeseries | get_interlay_analysis_timeseries | eden_service/src/comm/interlays/analysis_timeseries.rs:343 | |
| POST | /api/v1/interlays/{interlay}/start | start | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/start.rs:814 |
| POST | /api/v1/interlays/{interlay}/stop | stop | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/interlays/stop.rs:29 |
| POST | /api/v1/json/flatten | json_flatten | Flatten JSON | eden_service/src/comm/json/flatten.rs:22 |
| POST | /api/v1/json/map | json_map | Map JSON | eden_service/src/comm/json/map.rs:24 |
| POST | /api/v1/json/parse | json_parse | Parse JSON | eden_service/src/comm/json/parse.rs:22 |
| POST | /api/v1/json/reduce | json_reduce | Reduce JSON | eden_service/src/comm/json/reduce.rs:22 |
| POST | /api/v1/json/unflatten | json_unflatten | Unflatten JSON | eden_service/src/comm/json/unflatten.rs:15 |
| GET | /api/v1/llm/assistants | list_assistants | eden_service/src/comm/llm/assistants.rs:23 | |
| POST | /api/v1/llm/chat | chat | eden_service/src/comm/llm/chat.rs:1148 | |
| POST | /api/v1/llm/chat/cancel | cancel_chat | eden_service/src/comm/llm/chat.rs:6505 | |
| POST | /api/v1/llm/chat/stream | chat_stream | eden_service/src/comm/llm/chat.rs:1752 | |
| POST | /api/v1/llm/chat/tool-decision | submit_tool_decision | eden_service/src/comm/llm/chat.rs:6460 | |
| POST | /api/v1/llm/chat/tool-form-submit | submit_tool_form | eden_service/src/comm/llm/chat.rs:6077 | |
| POST | /api/v1/llm/chat/tool-result | submit_tool_result | eden_service/src/comm/llm/chat.rs:6407 | |
| GET | /api/v1/llm/conversations | list_conversations | eden_service/src/comm/llm/chat.rs:6657 | |
| DELETE | /api/v1/llm/conversations/{conversation_id} | delete_conversation | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/settings.rs:411 |
| GET | /api/v1/llm/conversations/{conversation_id} | get_llm_conversation_settings | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/settings.rs:333 |
| PATCH | /api/v1/llm/conversations/{conversation_id}/project | assign_conversation | eden_service/src/comm/llm/projects.rs:107 | |
| GET | /api/v1/llm/conversations/{conversation_id}/settings | get | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/settings.rs:460 |
| PATCH | /api/v1/llm/conversations/{conversation_id}/settings | patch | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/settings.rs:560 |
| GET | /api/v1/llm/cost/timeseries | llm_cost_timeseries | LLM cost time-series (as-spent) over a configurable range + bucket. Query params: 'from'/'to' (RFC3339) or 'range' (e.g. '7d', default 30d); 'bucket' ('1h'/'6h'/'1d'/'1w', default '1d'); optional 'traffic_source', 'traffic_class' ('external' | 'internal' | 'all'), and 'group_by' ('provider' | 'model'). Permissions: 'ControlPerms::READ'. | eden_service/src/comm/llm/cost.rs:288 |
| GET | /api/v1/llm/cost/work-metadata | llm_cost_work_metadata | Grouped LLM spend by generic work metadata. Query params: 'from'/'to' (RFC3339) or 'range' (default 30d); optional 'metadata_key', 'metadata_value', 'provider', 'model', 'traffic_source', 'traffic_class', and 'limit' (default 100, cap 500). Permissions: 'ControlPerms::READ'. | eden_service/src/comm/llm/cost.rs:471 |
| GET | /api/v1/llm/credentials | llm_list_credentials | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/credentials.rs:90 |
| POST | /api/v1/llm/credentials | llm_create_credential | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/credentials.rs:117 |
| DELETE | /api/v1/llm/credentials/{credential_id} | llm_delete_credential | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/credentials.rs:210 |
| PATCH | /api/v1/llm/credentials/{credential_id} | llm_update_credential | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/credentials.rs:166 |
| GET | /api/v1/llm/endpoints | list_chat_endpoints | List LLM endpoints that the caller can actually use for chat. Permissions: same data-plane access check as '/llm/chat'. | eden_service/src/comm/llm/endpoints.rs:108 |
| GET | /api/v1/llm/gateway/api-keys | llm_list_api_keys | eden_service/src/comm/llm/proxy/keys.rs:620 | |
| POST | /api/v1/llm/gateway/api-keys | llm_create_api_key | eden_service/src/comm/llm/proxy/keys.rs:799 | |
| DELETE | /api/v1/llm/gateway/api-keys/{key_id} | llm_delete_api_key | eden_service/src/comm/llm/proxy/keys.rs:1101 | |
| PATCH | /api/v1/llm/gateway/api-keys/{key_id} | llm_update_api_key | eden_service/src/comm/llm/proxy/keys.rs:919 | |
| POST | /api/v1/llm/gateway/api-keys/{key_id}/rotate | llm_rotate_api_key | eden_service/src/comm/llm/proxy/keys.rs:1034 | |
| GET | /api/v1/llm/gateway/dashboard | llm_gateway_dashboard | eden_service/src/comm/llm/gateway_dashboard.rs:370 | |
| GET | /api/v1/llm/gateway/requests | llm_gateway_requests | Paginated, filterable gateway request history. Permissions: 'ControlPerms::READ'. | eden_service/src/comm/llm/requests.rs:362 |
| GET | /api/v1/llm/gateway/snapshot | llm_gateway_control_plane_snapshot | eden_service/src/comm/llm/proxy/keys.rs:643 | |
| GET | /api/v1/llm/gateway/traces | llm_gateway_traces | eden_service/src/comm/llm/traces.rs:188 | |
| GET | /api/v1/llm/governance/access-boundaries | list_access_boundaries | List access boundaries | eden_service/src/comm/llm/proxy/governance.rs:723 |
| PUT | /api/v1/llm/governance/access-boundaries | upsert_access_boundary | Create or update an access boundary | eden_service/src/comm/llm/proxy/governance.rs:788 |
| DELETE | /api/v1/llm/governance/access-boundaries/{boundary_uuid} | delete_access_boundary | Delete an access boundary | eden_service/src/comm/llm/proxy/governance.rs:854 |
| GET | /api/v1/llm/governance/access-boundaries/{boundary_uuid} | get_access_boundary | Get an access boundary | eden_service/src/comm/llm/proxy/governance.rs:756 |
| GET | /api/v1/llm/governance/budget-policies | llm_list_budget_policies | eden_service/src/comm/llm/proxy/budget_policy.rs:71 | |
| PUT | /api/v1/llm/governance/budget-policies | llm_upsert_budget_policy | eden_service/src/comm/llm/proxy/budget_policy.rs:119 | |
| DELETE | /api/v1/llm/governance/budget-policies/{policy_uuid} | llm_delete_budget_policy | eden_service/src/comm/llm/proxy/budget_policy.rs:172 | |
| GET | /api/v1/llm/governance/budget-policies/{policy_uuid} | llm_get_budget_policy | eden_service/src/comm/llm/proxy/budget_policy.rs:94 | |
| GET | /api/v1/llm/governance/content-policy-profiles | list_content_policy_profiles | List content-policy profiles | eden_service/src/comm/llm/proxy/governance.rs:377 |
| PUT | /api/v1/llm/governance/content-policy-profiles | upsert_content_policy_profile | Create or update a content-policy profile | eden_service/src/comm/llm/proxy/governance.rs:443 |
| DELETE | /api/v1/llm/governance/content-policy-profiles/{profile_uuid} | delete_content_policy_profile | Delete a content-policy profile | eden_service/src/comm/llm/proxy/governance.rs:508 |
| GET | /api/v1/llm/governance/content-policy-profiles/{profile_uuid} | get_content_policy_profile | Get a content-policy profile | eden_service/src/comm/llm/proxy/governance.rs:411 |
| GET | /api/v1/llm/governance/exports | list_governance_exports | List governance evidence exports | eden_service/src/comm/llm/proxy/governance.rs:898 |
| POST | /api/v1/llm/governance/exports | create_governance_export | Create a governance evidence export | eden_service/src/comm/llm/proxy/governance.rs:963 |
| POST | /api/v1/llm/governance/exports/from-history | create_governance_export_from_history | Generate promptless compliance evidence | eden_service/src/comm/llm/proxy/compliance_evidence.rs:155 |
| GET | /api/v1/llm/governance/exports/{export_uuid} | get_governance_export | Get a governance evidence export | eden_service/src/comm/llm/proxy/governance.rs:931 |
| GET | /api/v1/llm/governance/feature-records/{feature_kind} | list_governance_feature_records | List governance feature records | eden_service/src/comm/llm/proxy/governance.rs:1237 |
| GET | /api/v1/llm/governance/feature-records/{feature_kind}/{record_uuid} | get_governance_feature_record | Get a governance feature record | eden_service/src/comm/llm/proxy/governance.rs:1275 |
| GET | /api/v1/llm/governance/lineage | list_governance_lineage | List governance lineage records | eden_service/src/comm/llm/proxy/governance.rs:1018 |
| GET | /api/v1/llm/governance/lineage/{lineage_uuid} | get_governance_lineage | Get a governance lineage record | eden_service/src/comm/llm/proxy/governance.rs:1051 |
| GET | /api/v1/llm/governance/policy-bindings | list_policy_bindings | List policy bindings | eden_service/src/comm/llm/proxy/governance.rs:552 |
| PUT | /api/v1/llm/governance/policy-bindings | upsert_policy_binding | Create or update a policy binding | eden_service/src/comm/llm/proxy/governance.rs:614 |
| DELETE | /api/v1/llm/governance/policy-bindings/{binding_uuid} | delete_policy_binding | Delete a policy binding | eden_service/src/comm/llm/proxy/governance.rs:679 |
| GET | /api/v1/llm/governance/policy-bindings/{binding_uuid} | get_policy_binding | Get a policy binding | eden_service/src/comm/llm/proxy/governance.rs:582 |
| GET | /api/v1/llm/marketplace/search | search_marketplace | eden_service/src/comm/llm/marketplace.rs:543 | |
| GET | /api/v1/llm/orchestration/status | orchestration_status | eden_service/src/comm/llm/chat.rs:6562 | |
| GET | /api/v1/llm/pii/dictionary | llm_get_org_pii_dictionary | eden_service/src/comm/llm/proxy/keys.rs:1149 | |
| PUT | /api/v1/llm/pii/dictionary | llm_update_org_pii_dictionary | eden_service/src/comm/llm/proxy/keys.rs:1171 | |
| POST | /api/v1/llm/pii/redact | llm_redact_text_pii | Redact PII from UTF-8 text | eden_service/src/comm/llm/proxy/text_pii.rs:108 |
| GET | /api/v1/llm/pricing | llm_pricing | Current per-model provider prices (live OpenRouter cache over static fallback). Permissions: 'ControlPerms::READ'. | eden_service/src/comm/llm/cost.rs:741 |
| GET | /api/v1/llm/projects | list_llm_projects | eden_service/src/comm/llm/projects.rs:44 | |
| POST | /api/v1/llm/projects | create | eden_service/src/comm/llm/projects.rs:59 | |
| DELETE | /api/v1/llm/projects/{project_uuid} | delete_llm_project | eden_service/src/comm/llm/projects.rs:86 | |
| GET | /api/v1/llm/recipes | list_recipes | eden_service/src/comm/llm/settings.rs:1138 | |
| GET | /api/v1/llm/skills | list_skills | eden_service/src/comm/llm/settings.rs:1108 | |
| GET | /api/v1/llm/system-prompts | list_system_prompts | eden_service/src/comm/llm/settings.rs:1089 | |
| GET | /api/v1/llm/tools | list_tools | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/tools.rs:47 |
| GET | /api/v1/llm/tools/endpoints | llm_list_tools_endpoints | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/tools_endpoints.rs:66 |
| POST | /api/v1/llm/tools/endpoints | llm_register_tools_endpoint | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/tools_endpoints.rs:100 |
| DELETE | /api/v1/llm/tools/endpoints/{endpoint_id} | llm_delete_tools_endpoint | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/llm/tools_endpoints.rs:202 |
| GET | /api/v1/migration-workflows/redis | list_redis_migration_workflows | eden_service/src/comm/migration_workflows/list.rs:70 | |
| POST | /api/v1/migration-workflows/redis | start_redis_migration_workflow | eden_service/src/comm/migration_workflows/mod.rs:1788 | |
| GET | /api/v1/migration-workflows/redis/{run_id} | get_redis_migration_workflow | eden_service/src/comm/migration_workflows/mod.rs:2432 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/approve | approve_redis_migration_workflow | eden_service/src/comm/migration_workflows/mod.rs:2030 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/cancel | cancel_redis_migration_workflow | eden_service/src/comm/migration_workflows/mod.rs:2600 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/complete | complete_redis_migration_workflow | eden_service/src/comm/migration_workflows/mod.rs:2325 | |
| GET | /api/v1/migration-workflows/redis/{run_id}/events | stream_redis_migration_workflow_events | eden_service/src/comm/migration_workflows/mod.rs:2456 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/prepare | prepare_redis_migration_workflow | eden_service/src/comm/migration_workflows/prepare.rs:305 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/recommendations | recommend_redis_migration_workflow_target | eden_service/src/comm/migration_workflows/mod.rs:1993 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/retry | retry_redis_migration_workflow | eden_service/src/comm/migration_workflows/mod.rs:2149 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/setup | submit_redis_migration_workflow_setup | eden_service/src/comm/migration_workflows/mod.rs:1840 | |
| POST | /api/v1/migration-workflows/redis/{run_id}/target | submit_redis_migration_workflow_target | eden_service/src/comm/migration_workflows/mod.rs:1932 | |
| GET | /api/v1/migrations | list_migrations | Get a Migration Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/get.rs:350 |
| POST | /api/v1/migrations | create_migration | Create a Template Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/post.rs:51 |
| GET | /api/v1/migrations/jobs | list_migration_jobs | List migration jobs for the authenticated organization. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migration_jobs.rs:107 |
| POST | /api/v1/migrations/jobs/verify | verify_migration_jobs | Verify the durable state of one or all migration jobs in the current organization. This is read-only: it validates tenant ownership and both sides of the migration/job link, then reports worker-recorded errors. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migration_jobs.rs:190 |
| GET | /api/v1/migrations/jobs/{job_uuid} | get_migration_job | Get a migration job by UUID. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migration_jobs.rs:157 |
| GET | /api/v1/migrations/test/catalog | get_migration_test_catalog | eden_service/src/comm/migrations/test_governance.rs:116 | |
| GET | /api/v1/migrations/updated | list_migrations_updated | Get a Migration Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/get.rs:391 |
| POST | /api/v1/migrations/{migration_id}/cancel | cancel_migration | Cancel a running or paused migration, or resume its cancellation reconciliation | eden_service/src/comm/migrations/cancel.rs:49 |
| POST | /api/v1/migrations/{migration_id}/cancel | api_cancel_migration | Cancel a running or paused migration | eden_service/src/comm/migrations/strategy/api/cancel.rs:50 |
| GET | /api/v1/migrations/{migration_id}/cdc/gaps | gaps | List migration CDC validation gaps | eden_service/src/comm/migrations/cdc.rs:188 |
| POST | /api/v1/migrations/{migration_id}/cdc/gaps/resolve | resolve_gap | Confirm operator reconciliation of a Db2 CDC validation gap | eden_service/src/comm/migrations/cdc.rs:216 |
| POST | /api/v1/migrations/{migration_id}/cdc/pause | pause | Pause Db2 migration CDC validation | eden_service/src/comm/migrations/cdc.rs:391 |
| POST | /api/v1/migrations/{migration_id}/cdc/resume | resume | Resume Db2 migration CDC validation | eden_service/src/comm/migrations/cdc.rs:324 |
| GET | /api/v1/migrations/{migration_id}/cdc/status | status | Read migration CDC validation status | eden_service/src/comm/migrations/cdc.rs:165 |
| POST | /api/v1/migrations/{migration_id}/complete | complete_migration | Manually complete a running migration | eden_service/src/comm/migrations/complete.rs:1654 |
| POST | /api/v1/migrations/{migration_id}/complete | api_complete_migration | Manually complete a running migration | eden_service/src/comm/migrations/strategy/api/complete.rs:87 |
| POST | /api/v1/migrations/{migration_id}/cutover/preflight | cutover_preflight | Preflight migration cutover | eden_service/src/comm/migrations/complete.rs:1456 |
| POST | /api/v1/migrations/{migration_id}/ha/confirm | post_ha_confirmation | Confirm this Eden node observes the identical HA migration state digest | eden_service/src/comm/migrations/ha.rs:1401 |
| PATCH | /api/v1/migrations/{migration_id}/ha/lanes/{lane_id}/checkpoint | patch_ha_lane_checkpoint | Checkpoint HA migration lane progress under the active lease epoch | eden_service/src/comm/migrations/ha.rs:1368 |
| POST | /api/v1/migrations/{migration_id}/ha/lanes/{lane_id}/lease | claim_ha_lane_lease | Claim or renew one HA migration lane lease | eden_service/src/comm/migrations/ha.rs:1332 |
| GET | /api/v1/migrations/{migration_id}/ha/plan | get_ha_plan | Read the HA migration lane plan | eden_service/src/comm/migrations/ha.rs:1264 |
| PUT | /api/v1/migrations/{migration_id}/ha/plan | put_ha_plan | Install or replace the HA migration lane plan by revision | eden_service/src/comm/migrations/ha.rs:1293 |
| POST | /api/v1/migrations/{migration_id}/ha/stage | post_ha_stage | Advance the HA migration stage after checking all lane barriers | eden_service/src/comm/migrations/ha.rs:1436 |
| POST | /api/v1/migrations/{migration_id}/interlay/{interlay_id}/rollback | rollback_interlay_migration | Rollback a migration for a specific interlay | eden_service/src/comm/migrations/rollback_interlay.rs:44 |
| POST | /api/v1/migrations/{migration_id}/interlay/{interlay_id}/rollback | api_rollback_interlay_migration | Rollback a migration for a specific interlay | eden_service/src/comm/migrations/strategy/api/rollback_interlay.rs:153 |
| POST | /api/v1/migrations/{migration_id}/interlays/rollback | rollback_all_interlays | Rollback all interlays for a migration | eden_service/src/comm/migrations/rollback_all_interlays.rs:40 |
| POST | /api/v1/migrations/{migration_id}/interlays/rollback | api_rollback_all_interlays | Rollback all interlays for a migration | eden_service/src/comm/migrations/strategy/api/rollback_all_interlays.rs:85 |
| GET | /api/v1/migrations/{migration_id}/live-write-mode | get_migration_live_write_mode | Read heterogeneous live write mode | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:220 |
| PATCH | /api/v1/migrations/{migration_id}/live-write-mode | update_migration_live_write_mode | Switch heterogeneous live writes to strict dual-write | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:454 |
| GET | /api/v1/migrations/{migration_id}/live-write-mode/readiness | get_migration_live_write_mode_readiness | Read live write mode switch readiness | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:240 |
| POST | /api/v1/migrations/{migration_id}/pause | pause_migration | Pause a running migration | eden_service/src/comm/migrations/pause.rs:56 |
| POST | /api/v1/migrations/{migration_id}/pause | api_pause_migration | Pause a running migration | eden_service/src/comm/migrations/strategy/api/pause.rs:191 |
| POST | /api/v1/migrations/{migration_id}/resume | resume_migration | Resume a paused migration | eden_service/src/comm/migrations/pause.rs:180 |
| POST | /api/v1/migrations/{migration_id}/resume | api_resume_migration | Resume a paused migration | eden_service/src/comm/migrations/strategy/api/pause.rs:415 |
| GET | /api/v1/migrations/{migration_id}/runtime-query-misses | list_migration_runtime_query_misses | List unresolved heterogeneous runtime query misses | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:420 |
| PATCH | /api/v1/migrations/{migration_id}/toggle | toggle_blue_green_environment | Toggle active environment for blue-green migration | eden_service/src/comm/migrations/strategy/blue_green/toggle_environment.rs:225 |
| PATCH | /api/v1/migrations/{migration_id}/traffic | update_migration_traffic_split | Update canary traffic split percentage | eden_service/src/comm/migrations/strategy/api/update_traffic.rs:82 |
| GET | /api/v1/migrations/{migration_id}/write-log/events | list_migration_write_log_events | List recent heterogeneous write-log events | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:286 |
| GET | /api/v1/migrations/{migration_id}/write-log/gaps | list_migration_write_log_gaps | List heterogeneous write-log gaps | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:312 |
| POST | /api/v1/migrations/{migration_id}/write-log/gaps/{gap_id}/repair | repair_migration_write_log_gap | Confirm external repair of a write-log gap | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:344 |
| POST | /api/v1/migrations/{migration_id}/write-log/gaps/{gap_id}/retry | retry_migration_write_log_gap | Request one ordered provider replay of a dead-lettered write-log event | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:388 |
| GET | /api/v1/migrations/{migration_id}/write-log/status | get_migration_write_log_status | Read heterogeneous write-log replay status | eden_service/src/comm/migrations/strategy/api/update_live_write_mode.rs:260 |
| GET | /api/v1/migrations/{migration} | get_migration | Get a Migration Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/get.rs:168 |
| GET | /api/v1/migrations/{migration}/analysis/config | get_migration_analysis_config | Get the auto-analysis schedule for a migration Returns the persisted schedule state — 'enabled', 'interval', and 'last_run_at'. Missing rows are returned as disabled with no interval. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/analysis/auto_config.rs:38 |
| PATCH | /api/v1/migrations/{migration}/analysis/config | update_migration_analysis_config | Update the auto-analysis schedule for a migration Persists whether auto-analysis is enabled and at what cadence. The scheduler reads this row on each tick; changes take effect on the next tick (up to 60s). Cannot update the schedule while an analysis run is actively in progress. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/analysis/config.rs:63 |
| GET | /api/v1/migrations/{migration}/analysis/history | get_migration_analysis_history | Get the full available historical analytics window for a migration. This endpoint reads the verified ShardTelemetry full-history snapshot so clients can understand the total available history that 'POST /migrations/{migration}/analysis/run' will analyze. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/analysis/history.rs:121 |
| POST | /api/v1/migrations/{migration}/analysis/history/backfill | backfill_migration_analysis_history | Capture and publish the existing full normalized history for one migration. Requires CONFIGURE permission in the owning organization. | eden_service/src/comm/migrations/analysis/backfill.rs:52 |
| GET | /api/v1/migrations/{migration}/analysis/info | get_migration_analysis_info | Get information about all analyses for a migration Returns array of all analysis records (past and current) for the migration. Can be called while analysis is running to monitor progress. ClickHouse-backed runs include structured historical window metadata. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/analysis/info.rs:105 |
| POST | /api/v1/migrations/{migration}/analysis/run | run_migration_analysis | Run the analysis phase for a migration Runs historical analytics analysis to inform migration planning. The analysis completes immediately from verified ShardTelemetry history. An unavailable telemetry operation returns a typed advisory skip from that original operation; validation and durable-state failures retain their normal error behavior. Status and source prerequisites are checked before probing optional telemetry or invalidating an existing governed decision. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/analysis/start.rs:392 |
| POST | /api/v1/migrations/{migration}/analysis/stop | stop_migration_analysis | Stop the currently running analysis for a migration Gracefully stops the analysis task and marks the collected data as complete. The partial results will be saved and can be viewed via the /info endpoint. Note: Only one analysis can run at a time per migration. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/analysis/stop.rs:55 |
| GET | /api/v1/migrations/{migration}/analysis/timeseries | get_migration_analysis_timeseries | 'GET /migrations/{migration}/analysis/timeseries?range=1h' Returns one-minute CPU / memory / ops-per-sec buckets for the migration's source endpoint over the requested lookback window. | eden_service/src/comm/migrations/analysis/timeseries.rs:147 |
| GET | /api/v1/migrations/{migration}/analysis/timeseries | get_migration_analysis_timeseries | 'GET /migrations/{migration}/analysis/timeseries?range=1h' Returns one-minute CPU / memory / ops-per-sec buckets for the migration's source endpoint over the requested lookback window. | eden_service/src/comm/migrations/analysis/timeseries.rs:281 |
| POST | /api/v1/migrations/{migration}/api/{api} | add_api_to_migration | Run an API Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/add_api.rs:45 |
| POST | /api/v1/migrations/{migration}/api/{api}/terminal-recovery | recover_api_migration_terminal | Reconcile an API migration terminal decision after a request timeout or controller loss. A successor may take over only after the durable terminal lease expires; unresolved external effects remain blocked and are never cleared by this endpoint. | eden_service/src/comm/migrations/api_terminal_recovery.rs:219 |
| GET | /api/v1/migrations/{migration}/bootstrap | get_migration_bootstrap | Get bootstrap preflight and execution status. | eden_service/src/comm/migrations/bootstrap/api.rs:455 |
| POST | /api/v1/migrations/{migration}/bootstrap/cancel | cancel_migration_bootstrap | Cancel bootstrap orchestration while retaining snapshots and target resources. | eden_service/src/comm/migrations/bootstrap/api.rs:649 |
| POST | /api/v1/migrations/{migration}/bootstrap/preflight | preflight_migration_bootstrap | Validate an AWS ElastiCache snapshot bootstrap without creating resources. | eden_service/src/comm/migrations/bootstrap/api.rs:174 |
| POST | /api/v1/migrations/{migration}/bootstrap/retry | retry_migration_bootstrap | Retry a failed snapshot bootstrap from its durable resources. | eden_service/src/comm/migrations/bootstrap/api.rs:487 |
| POST | /api/v1/migrations/{migration}/bootstrap/start | start_migration_bootstrap | Start a preflight-approved snapshot bootstrap. | eden_service/src/comm/migrations/bootstrap/api.rs:293 |
| POST | /api/v1/migrations/{migration}/compatibility/acknowledge-all | acknowledge_all_migration_compatibility_issues | Bulk-acknowledge all unresolved compatibility issues Marks all remaining unresolved issues as "accept_risk". Convenience endpoint for users who want to proceed despite warnings. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/compatibility/resolve.rs:511 |
| GET | /api/v1/migrations/{migration}/compatibility/info | get_migration_compatibility_info | Get information about all compatibility checks for a migration Returns array of all compatibility check records (past and current) for the migration. Can be called while a check is running to monitor progress. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/compatibility/info.rs:80 |
| POST | /api/v1/migrations/{migration}/compatibility/resolve | resolve_migration_compatibility_issue | Resolve a specific compatibility issue Marks the specified issue as resolved with the chosen resolution option. When all blocking issues are resolved, the compatibility status transitions to Resolved. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/compatibility/resolve.rs:96 |
| POST | /api/v1/migrations/{migration}/compatibility/start | start_migration_compatibility | Start or explicitly refresh the compatibility check phase for a migration. Runs compatibility checks against source and target Redis instances, detecting version mismatches, missing modules, ACL issues, and other potential migration blockers. Each call persists a new raw generation; the guided workflow reuses completed generations and never calls this route on retry. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/compatibility/start.rs:184 |
| POST | /api/v1/migrations/{migration}/compatibility/unresolve | unresolve_migration_compatibility_issue | Reverse a previous resolution on a single compatibility issue. Allowed only while the migration has not started running traffic. Testing is still considered pre-run, so undoing a blocking resolution moves the migration back to Compatibility. Permissions: same as resolve — CONFIGURE. | eden_service/src/comm/migrations/compatibility/resolve.rs:345 |
| PATCH | /api/v1/migrations/{migration}/data/config | update_migration_data_movement_config | Update the migration data movement configuration. Only allowed while the migration remains pre-execution. Heterogeneous mappings are stored as draftable migration data and are validated again when the heterogeneous workers are started. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/data_config.rs:123 |
| GET | /api/v1/migrations/{migration}/data/info | get_migration_data_movement_info | Get the current migration data movement configuration. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/data_config.rs:63 |
| GET | /api/v1/migrations/{migration}/error-keys | get_migration_error_keys | Get migration error keys Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/get.rs:295 |
| POST | /api/v1/migrations/{migration}/execution/preflight | preflight_migration_execution | eden_service/src/comm/migrations/migrate.rs:881 | |
| PATCH | /api/v1/migrations/{migration}/failure-handling/config | update_migration_failure_handling_config | Update the migration failure handling configuration Only allowed when the migration is in Pending status. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/failure_handling_config.rs:114 |
| GET | /api/v1/migrations/{migration}/failure-handling/info | get_migration_failure_handling_info | Get the current migration failure handling configuration Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/failure_handling_config.rs:40 |
| DELETE | /api/v1/migrations/{migration}/guard-policy | disable_migration_guard_policy | Disable a policy while retaining its authority, decisions, and action history. | eden_service/src/comm/migrations/guard_policy.rs:716 |
| GET | /api/v1/migrations/{migration}/guard-policy | get_migration_guard_policy | Read the current policy, including disabled state and its immutable identity. | eden_service/src/comm/migrations/guard_policy.rs:595 |
| PUT | /api/v1/migrations/{migration}/guard-policy | put_migration_guard_policy | Create or revision-CAS replace a tenant-bound migration guard policy. | eden_service/src/comm/migrations/guard_policy.rs:630 |
| GET | /api/v1/migrations/{migration}/guard-policy/actions | list_migration_guard_actions | Read bounded durable action history without exposing raw request payloads. | eden_service/src/comm/migrations/guard_policy.rs:1086 |
| POST | /api/v1/migrations/{migration}/guard-policy/actions | execute_migration_guard_action | Consume one signed action authorization through the executor. | eden_service/src/comm/migrations/guard_policy.rs:873 |
| GET | /api/v1/migrations/{migration}/guard-policy/actions/{idempotency_key} | get_migration_guard_action | Read one tenant-bound durable action record for reconciliation. | eden_service/src/comm/migrations/guard_policy.rs:1117 |
| GET | /api/v1/migrations/{migration}/guard-policy/decisions | list_migration_guard_decisions | Read bounded decision history for the authenticated migration tenant. | eden_service/src/comm/migrations/guard_policy.rs:1054 |
| POST | /api/v1/migrations/{migration}/guard-policy/preview | preview_migration_guard_policy | Evaluate authenticated evidence without dispatching a migration effect. | eden_service/src/comm/migrations/guard_policy.rs:759 |
| DELETE | /api/v1/migrations/{migration}/interlay/{interlay} | delete_interlay_from_migration | Run an API Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/delete_interlay.rs:49 |
| POST | /api/v1/migrations/{migration}/interlay/{interlay} | add_interlay_to_migration | Run an API Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/add_interlay.rs:65 |
| GET | /api/v1/migrations/{migration}/kafka | get_kafka_migration | eden_service/src/comm/migrations/kafka.rs:3636 | |
| PUT | /api/v1/migrations/{migration}/kafka | configure | eden_service/src/comm/migrations/kafka.rs:3590 | |
| POST | /api/v1/migrations/{migration}/kafka/commands | command | eden_service/src/comm/migrations/kafka.rs:4224 | |
| GET | /api/v1/migrations/{migration}/kafka/delivery-intents | delivery_intents | eden_service/src/comm/migrations/kafka.rs:3899 | |
| POST | /api/v1/migrations/{migration}/kafka/delivery-intents/resolve | resolve_delivery_intent | eden_service/src/comm/migrations/kafka.rs:3987 | |
| GET | /api/v1/migrations/{migration}/kafka/metrics | metrics | eden_service/src/comm/migrations/kafka.rs:3665 | |
| POST | /api/v1/migrations/{migration}/kafka/preflight | preflight | eden_service/src/comm/migrations/kafka.rs:3699 | |
| POST | /api/v1/migrations/{migration}/kafka/preflight/collect | collect_preflight | eden_service/src/comm/migrations/kafka.rs:3737 | |
| GET | /api/v1/migrations/{migration}/live-metrics | live_metrics | Get live metrics for a migration. Returns ClickHouse metric rows for the latest migration run, using the telemetry export response shape. | eden_service/src/comm/migrations/get.rs:459 |
| POST | /api/v1/migrations/{migration}/migrate | start_migration | Run a migration Starts execution of the specified migration. By default, all interlays attached to the migration will be migrated. Optionally specify 'interlay_id' in the request body to migrate only a single interlay. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/migrate.rs:1234 |
| GET | /api/v1/migrations/{migration}/planning/agent | get_migration_planning_agent | eden_service/src/comm/migrations/planning.rs:571 | |
| PATCH | /api/v1/migrations/{migration}/planning/agent | configure_migration_planning_agent | eden_service/src/comm/migrations/planning.rs:960 | |
| POST | /api/v1/migrations/{migration}/planning/agent/recommend | recommend_migration_schema_mapping | eden_service/src/comm/migrations/planning.rs:1489 | |
| POST | /api/v1/migrations/{migration}/planning/agent/recommend-request-mapping | recommend_migration_request_mapping | eden_service/src/comm/migrations/planning.rs:1607 | |
| POST | /api/v1/migrations/{migration}/planning/finalize | finalize_migration_planning | eden_service/src/comm/migrations/planning.rs:637 | |
| GET | /api/v1/migrations/{migration}/planning/query-seeding/queries | list_migration_seeded_queries | eden_service/src/comm/migrations/planning.rs:1417 | |
| GET | /api/v1/migrations/{migration}/planning/query-seeding/queries/{query_key} | get_migration_seeded_query | eden_service/src/comm/migrations/planning.rs:1453 | |
| POST | /api/v1/migrations/{migration}/planning/query-seeding/start | start_migration_query_seeding | eden_service/src/comm/migrations/planning.rs:1262 | |
| GET | /api/v1/migrations/{migration}/planning/query-seeding/status | get_migration_query_seeding_status | eden_service/src/comm/migrations/planning.rs:1372 | |
| GET | /api/v1/migrations/{migration}/planning/request-mapping | get_migration_request_mapping_plan | eden_service/src/comm/migrations/planning.rs:807 | |
| PATCH | /api/v1/migrations/{migration}/planning/request-mapping | configure_migration_request_mapping_plan | eden_service/src/comm/migrations/planning.rs:1091 | |
| GET | /api/v1/migrations/{migration}/planning/request-mapping/missing | get_migration_request_mapping_missing | eden_service/src/comm/migrations/planning.rs:864 | |
| PATCH | /api/v1/migrations/{migration}/planning/request-mapping/queries | patch_migration_request_mapping_queries | eden_service/src/comm/migrations/planning.rs:1225 | |
| GET | /api/v1/migrations/{migration}/planning/request-mapping/query/{query_key} | get_migration_request_mapping_query | eden_service/src/comm/migrations/planning.rs:925 | |
| PATCH | /api/v1/migrations/{migration}/planning/request-mapping/query/{query_key} | patch_migration_request_mapping_query | eden_service/src/comm/migrations/planning.rs:1187 | |
| POST | /api/v1/migrations/{migration}/planning/run | run_migration_planning | eden_service/src/comm/migrations/planning.rs:537 | |
| GET | /api/v1/migrations/{migration}/planning/schema-mapping | get_migration_schema_mapping | eden_service/src/comm/migrations/planning.rs:670 | |
| PATCH | /api/v1/migrations/{migration}/planning/schema-mapping | configure_migration_schema_mapping | eden_service/src/comm/migrations/planning.rs:1028 | |
| GET | /api/v1/migrations/{migration}/planning/schema-mapping/missing | get_migration_schema_mapping_missing_keys | eden_service/src/comm/migrations/planning.rs:704 | |
| GET | /api/v1/migrations/{migration}/planning/target-schema-plan | get_migration_target_schema_plan | eden_service/src/comm/migrations/planning.rs:753 | |
| POST | /api/v1/migrations/{migration}/planning/validate | validate_migration_planning | eden_service/src/comm/migrations/planning.rs:604 | |
| POST | /api/v1/migrations/{migration}/recover | recover_migration | Recover a watchdog-stalled migration without exposing a bare unlock. | eden_service/src/comm/migrations/recovery.rs:311 |
| GET | /api/v1/migrations/{migration}/stages | get_migration_stage_governance | eden_service/src/comm/migrations/stage_governance.rs:260 | |
| DELETE | /api/v1/migrations/{migration}/stages/{stage}/disposition | reset_migration_stage_disposition | eden_service/src/comm/migrations/stage_governance.rs:437 | |
| PUT | /api/v1/migrations/{migration}/stages/{stage}/disposition | set_migration_stage_disposition | eden_service/src/comm/migrations/stage_governance.rs:388 | |
| PATCH | /api/v1/migrations/{migration}/strategy/config | update_migration_strategy_config | Update the migration strategy configuration Only allowed when the migration is in Pending status. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/strategy_config.rs:97 |
| GET | /api/v1/migrations/{migration}/strategy/info | get_migration_strategy_info | Get the current migration strategy configuration Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/strategy_config.rs:40 |
| POST | /api/v1/migrations/{migration}/test | create_migration_test | Create one migration test definition. Appends the provided test to the migration-level test suite. Only allowed while the migration is in Pending status. Permissions: CONFIGURE. | eden_service/src/comm/migrations/test_suite/create.rs:71 |
| POST | /api/v1/migrations/{migration}/test/cancel | cancel_migration_test_run | Request cancellation of the active migration test run. Cancellation is coarse-grained: the background runner observes the token between API/interlay test executions and then persists the terminal 'cancelled' status. Poll 'GET /migrations/{migration}/test/runs/{run_uuid}' until the run reaches a terminal state. Permissions: CONFIGURE. | eden_service/src/comm/migrations/test_runs/cancel.rs:43 |
| PATCH | /api/v1/migrations/{migration}/test/config | update_migration_test_config | Update the test configurations for a migration Replaces the migration-level test definitions. Only allowed when the migration is in Pending status. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/test_config.rs:70 |
| GET | /api/v1/migrations/{migration}/test/governance | get_migration_test_governance | eden_service/src/comm/migrations/test_governance.rs:157 | |
| GET | /api/v1/migrations/{migration}/test/info | get_migration_test_info | Get test configuration and results for a migration Returns migration-level test definitions plus per-API and per-interlay test results. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/test_info.rs:203 |
| GET | /api/v1/migrations/{migration}/test/logs | get_migration_test_logs | Read recent test log lines for a migration. Permissions: CONFIGURE. | eden_service/src/comm/migrations/test_logs.rs:147 |
| POST | /api/v1/migrations/{migration}/test/refresh | refresh_migration_test_suite | Rebind the existing suite to current endpoint/config authority. This does not start a run and never substitutes defaults for Custom/ExplicitEmpty. | eden_service/src/comm/migrations/test_governance.rs:204 |
| POST | /api/v1/migrations/{migration}/test/reset | reset_migration_test_suite | eden_service/src/comm/migrations/test_governance.rs:258 | |
| GET | /api/v1/migrations/{migration}/test/runs | list_migration_test_runs | List migration test run history, newest first. Permissions: READ. | eden_service/src/comm/migrations/test_runs/list.rs:45 |
| POST | /api/v1/migrations/{migration}/test/runs | start_migration_test_run | Start an async migration test run. Returns a 'run_uuid' and 'status: "running"' immediately. Poll 'GET /migrations/{migration}/test/runs/{run_uuid}' for the terminal status. Returns 409 if a run is already active for this migration. Permissions: CONFIGURE. | eden_service/src/comm/migrations/test_runs/start.rs:60 |
| GET | /api/v1/migrations/{migration}/test/runs/{run_uuid} | get_migration_test_run | Get one migration test run by UUID. Permissions: READ. | eden_service/src/comm/migrations/test_runs/get.rs:32 |
| GET | /api/v1/migrations/{migration}/test/runs/{run_uuid}/logs | get_migration_test_run_logs | Read log lines for a specific migration test run. For the active run this reads the live in-memory ring buffer. For completed runs this reads the persisted 'log_snapshot'. Permissions: CONFIGURE. | eden_service/src/comm/migrations/test_runs/logs.rs:52 |
| DELETE | /api/v1/migrations/{migration}/test/{test_name} | delete_migration_test | Delete one migration test definition. Removes the named test from the migration-level test suite. Only allowed while the migration is in Pending status. Permissions: CONFIGURE. | eden_service/src/comm/migrations/test_suite/delete.rs:65 |
| GET | /api/v1/migrations/{migration}/test/{test_name} | get_single_migration_test_status | Get the status of a single migration test by name Returns the API- and interlay-level definitions and execution state for the specified test. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/test_status.rs:198 |
| PATCH | /api/v1/migrations/{migration}/test/{test_name} | update_single_migration_test | Update the configuration of a single migration test by name Replaces the test identified by 'test_name' in the migration's test suite with the provided test definition. The replacement test must have the same variant name. Only allowed when the migration is in Pending status. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/test_patch.rs:71 |
| DELETE | /api/v1/migrations/{migration}/test/{test_name}/disposition | reset_migration_test_disposition | eden_service/src/comm/migrations/test_governance.rs:411 | |
| PUT | /api/v1/migrations/{migration}/test/{test_name}/disposition | set_migration_test_disposition | eden_service/src/comm/migrations/test_governance.rs:365 | |
| DELETE | /api/v1/organizations | delete_organization | Delete an Organization Permissions: 'ControlPerms::DESTROY' on Organization | eden_service/src/comm/organization/delete.rs:32 |
| GET | /api/v1/organizations | get_organization | Get all data associated with an existing Org Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/organization/get.rs:33 |
| PATCH | /api/v1/organizations | update_organization | Update Organization Update organization data. Permissions: 'ControlPerms::CONFIGURE' on Organization | eden_service/src/comm/organization/patch.rs:35 |
| POST | /api/v1/organizations | create_organization | Create a New Organization An endpoint for creating a new organization. Requires the EDEN_NEW_ORG_TOKEN as a Bearer token for authorization. | eden_service/src/comm/organization/post.rs:45 |
| GET | /api/v1/organizations/clients | list_organization_clients | eden_service/src/comm/organization/clients.rs:199 | |
| POST | /api/v1/organizations/clients/observations | observe_organization_client | eden_service/src/comm/organization/clients.rs:244 | |
| GET | /api/v1/organizations/eden-clusters | list_organization_eden_topology | eden_service/src/comm/organization/topology.rs:402 | |
| GET | /api/v1/organizations/eden-clusters/events | list_organization_eden_topology_events | eden_service/src/comm/organization/topology.rs:435 | |
| PUT | /api/v1/organizations/eden-clusters/{eden_cluster_uuid} | upsert_organization_eden_cluster | eden_service/src/comm/organization/topology.rs:470 | |
| PUT | /api/v1/organizations/eden-clusters/{eden_cluster_uuid}/ha-groups/{ha_group_uuid} | upsert_organization_ha_group | eden_service/src/comm/organization/topology.rs:512 | |
| POST | /api/v1/organizations/export | post_export | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/org_transfer/export.rs:66 |
| POST | /api/v1/organizations/import | post_import | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/org_transfer/import.rs:54 |
| GET | /api/v1/organizations/nodes | list_organization_nodes | eden_service/src/comm/organization/nodes.rs:339 | |
| DELETE | /api/v1/organizations/nodes/{eden_node_uuid} | delete_organization_node | eden_service/src/comm/organization/nodes.rs:446 | |
| PATCH | /api/v1/organizations/nodes/{eden_node_uuid} | update_organization_node_membership | eden_service/src/comm/organization/nodes.rs:402 | |
| PUT | /api/v1/organizations/nodes/{eden_node_uuid} | upsert_organization_node | eden_service/src/comm/organization/nodes.rs:363 | |
| GET | /api/v1/organizations/rate-limit | get_organization_rate_limit | Get current rate-limit status for the authenticated organization. Reads the live internal-cache token-bucket state for all four metrics ('bandwidth_ingress', 'bandwidth_egress', 'token_ingress', 'token_egress') and returns a snapshot of current usage, limits, and reset times. NOTE: We'll probably want more buckets pretty soon, e.g. some queries may entail a lot of compute but not send or receive much data # Refill applied in-response Remaining values are not read raw from storage. The same continuous refill formula used by the enforcement middleware is applied before returning, so clients always see a value consistent with what the next request would see: '''text remaining = min(limit, stored_t + elapsed × (limit / window_secs)) ''' # Reset times 'resets_at' is the RFC3339 timestamp at which the bucket would reach full capacity assuming no further requests consume tokens. It is computed as: '''text secs_to_full = ceil((limit - remaining) × window_secs / limit) ''' When the bucket is already full, 'resets_at' equals the current time. # No-limit fields Fields that have no configured limit are omitted from the response ('#[serde(skip_serializing_if = "Option::is_none")]'). For token metrics with no limit 'limit_tokens' and 'remaining_tokens' are both 0; clients must treat 'limit_tokens == 0' as "unlimited", not as an exhausted quota. | eden_service/src/comm/organization/rate_limit.rs:80 |
| GET | /api/v1/pipelines | list_pipelines | List all pipelines for the organization Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/pipelines/get.rs:55 |
| POST | /api/v1/pipelines | create_pipeline | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/pipelines/post.rs:26 |
| DELETE | /api/v1/pipelines/{pipeline} | delete_pipeline | Delete a pipeline. Stops the CDC worker if running and drops the replication slot/publication. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/pipelines/delete.rs:26 |
| GET | /api/v1/pipelines/{pipeline} | get_pipeline | Get a single pipeline by id or uuid Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/pipelines/get.rs:22 |
| POST | /api/v1/pipelines/{pipeline}/pause | pause_pipeline | Pause a running pipeline (stops the WAL consumer but keeps the replication slot). Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/pipelines/pause.rs:27 |
| POST | /api/v1/pipelines/{pipeline}/run | run_pipeline | Activate a pipeline (start CDC WAL consumer) Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/pipelines/run.rs:34 |
| GET | /api/v1/pipelines/{pipeline}/status | get_pipeline_status | Get real-time CDC status for a pipeline. Returns CDC-specific stats: whether the worker is active, the last confirmed LSN, replication slot lag, and buffer depth. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/pipelines/status.rs:29 |
| GET | /api/v1/snapshots | list_snapshots | List all snapshots for the organization Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/snapshots/get.rs:68 |
| POST | /api/v1/snapshots | create_snapshot | Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/snapshots/post.rs:26 |
| DELETE | /api/v1/snapshots/{snapshot} | delete_snapshot | Delete a snapshot (only if not currently running) Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/snapshots/delete.rs:27 |
| GET | /api/v1/snapshots/{snapshot} | get_snapshot | Get a single snapshot by id or uuid Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/snapshots/get.rs:23 |
| POST | /api/v1/snapshots/{snapshot}/pause | pause_snapshot | Pause a running CDC snapshot (stops the WAL consumer but keeps the replication slot). Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/snapshots/pause.rs:28 |
| POST | /api/v1/snapshots/{snapshot}/run | run_snapshot | Execute a snapshot (trigger data movement) Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/snapshots/run.rs:57 |
| GET | /api/v1/snapshots/{snapshot}/status | get_snapshot_status | Get real-time CDC status for a snapshot. Returns CDC-specific stats: whether the worker is active, the last confirmed LSN, replication slot lag, and buffer depth. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/snapshots/status.rs:30 |
| GET | /api/v1/templates | list_templates | Get a Template Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/templates/get.rs:85 |
| POST | /api/v1/templates | create_template | Create a Template Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/templates/post.rs:37 |
| GET | /api/v1/templates/updated | list_templates_updated | Get a Template Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/templates/get.rs:113 |
| DELETE | /api/v1/templates/{template} | delete_template | Delete (disconnect) a Template Permissions: 'ControlPerms::CONFIGURE' on the Template or Organization | eden_service/src/comm/templates/delete.rs:35 |
| GET | /api/v1/templates/{template} | get_template | Get a Template Permissions: 'ControlPerms::CONFIGURE' on the Template or Organization | eden_service/src/comm/templates/get.rs:35 |
| PATCH | /api/v1/templates/{template} | update_template | Update a Template Permissions: 'ControlPerms::CONFIGURE' on the Template or Organization | eden_service/src/comm/templates/patch.rs:40 |
| POST | /api/v1/templates/{template} | run_template | Run a Template Permissions: 'ControlPerms::READ' or 'ControlPerms::CONFIGURE' on the Template or Organization | eden_service/src/comm/templates/run.rs:79 |
| POST | /api/v1/templates/{template}/render | render_template | Run a Template Permissions: 'ControlPerms::CONFIGURE' on the Template or Organization | eden_service/src/comm/templates/render.rs:39 |
| POST | /api/v1/templates/{template}/render-many | render_many | Run a Template Permissions: 'ControlPerms::CONFIGURE' on the Template or Organization | eden_service/src/comm/templates/render.rs:105 |
| GET | /api/v1/vpn/device-enrollments/{enrollment_uuid} | get_vpn_device_enrollment | eden_service/src/comm/vpn.rs:1900 | |
| POST | /api/v1/vpn/device-enrollments/{enrollment_uuid}/approval | approve_vpn_device_enrollment | eden_service/src/comm/vpn.rs:1928 | |
| POST | /api/v1/vpn/device-enrollments/{enrollment_uuid}/rejection | reject_vpn_device_enrollment | eden_service/src/comm/vpn.rs:1971 | |
| GET | /api/v1/vpn/networks | list_vpn_networks | List managed VPN networks | eden_service/src/comm/vpn.rs:1534 |
| POST | /api/v1/vpn/networks | create_vpn_network | Create a managed VPN network | eden_service/src/comm/vpn.rs:1318 |
| DELETE | /api/v1/vpn/networks/{network_uuid} | delete_vpn_network | Start durable deletion of a managed VPN network | eden_service/src/comm/vpn.rs:1597 |
| GET | /api/v1/vpn/networks/{network_uuid} | get_vpn_network | Get a managed VPN network | eden_service/src/comm/vpn.rs:1564 |
| GET | /api/v1/vpn/networks/{network_uuid}/access-policy | get_vpn_network_access_policy | eden_service/src/comm/vpn.rs:1642 | |
| PUT | /api/v1/vpn/networks/{network_uuid}/access-policy | replace_vpn_network_access_policy | eden_service/src/comm/vpn.rs:1669 | |
| GET | /api/v1/vpn/networks/{network_uuid}/device-enrollments | list_vpn_device_enrollments | eden_service/src/comm/vpn.rs:1870 | |
| POST | /api/v1/vpn/networks/{network_uuid}/device-enrollments | create_vpn_device_enrollment | eden_service/src/comm/vpn.rs:1787 | |
| GET | /api/v1/vpn/networks/{network_uuid}/peers | list_vpn_peers | List VPN peers | eden_service/src/comm/vpn.rs:2080 |
| POST | /api/v1/vpn/networks/{network_uuid}/peers | create_vpn_peer | Create a VPN peer | eden_service/src/comm/vpn.rs:2006 |
| GET | /api/v1/vpn/networks/{network_uuid}/replicas | get_vpn_network_replicas | eden_service/src/comm/vpn.rs:1474 | |
| GET | /api/v1/vpn/networks/{network_uuid}/routes | list_vpn_routes | List VPN routes | eden_service/src/comm/vpn.rs:2472 |
| POST | /api/v1/vpn/networks/{network_uuid}/routes | create_vpn_route | Create a VPN route | eden_service/src/comm/vpn.rs:2330 |
| GET | /api/v1/vpn/networks/{network_uuid}/status | get_vpn_network_status | eden_service/src/comm/vpn.rs:1505 | |
| DELETE | /api/v1/vpn/peers/{peer_uuid} | delete_vpn_peer | Revoke a VPN peer | eden_service/src/comm/vpn.rs:2196 |
| PATCH | /api/v1/vpn/peers/{peer_uuid} | update_vpn_peer | Update a VPN peer | eden_service/src/comm/vpn.rs:2122 |
| GET | /api/v1/vpn/peers/{peer_uuid}/config | get_vpn_peer_config | Render a VPN peer client configuration | eden_service/src/comm/vpn.rs:2798 |
| GET | /api/v1/vpn/peers/{peer_uuid}/discovery | get_vpn_peer_discovery | eden_service/src/comm/vpn.rs:2842 | |
| POST | /api/v1/vpn/peers/{peer_uuid}/key-rotations | rotate_vpn_peer_key | eden_service/src/comm/vpn.rs:2229 | |
| GET | /api/v1/vpn/peers/{peer_uuid}/lifecycle | get_vpn_peer_lifecycle | eden_service/src/comm/vpn.rs:2286 | |
| DELETE | /api/v1/vpn/routes/{route_uuid} | delete_vpn_route | Delete a VPN route | eden_service/src/comm/vpn.rs:2512 |
| POST | /api/v1/workflows | create_workflow | Create a Workflow Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/workflows/post.rs:36 |
| DELETE | /api/v1/workflows/{workflow} | delete_workflow | Delete (disconnect) a Workflow Permissions: 'ControlPerms::CONFIGURE' on the Workflow or Organization | eden_service/src/comm/workflows/delete.rs:34 |
| GET | /api/v1/workflows/{workflow} | get_workflow | Get a Workflow Permissions: 'ControlPerms::CONFIGURE' on the Workflow or Organization | eden_service/src/comm/workflows/get.rs:30 |
| PATCH | /api/v1/workflows/{workflow} | update_workflow | Update a Workflow Permissions: 'ControlPerms::CONFIGURE' on the Workflow or Organization | eden_service/src/comm/workflows/patch.rs:34 |
| GET | /api/v1/workflows/{workflow}/versions | list_workflow_versions | eden_service/src/comm/workflows/versions.rs:36 | |
| GET | /api/v1/workflows/{workflow}/versions/{version} | get_workflow_version | eden_service/src/comm/workflows/versions.rs:63 | |
| POST | /api/v1/workflows/{workflow}/versions/{version}/plan | plan_workflow_version | eden_service/src/comm/workflows/versions.rs:90 | |
| POST | /api/v1migrations/{migration}/refresh | refresh | Refresh a 'Completed' migration back to 'Pending'. This endpoint is the only supported way to move a migration from Completed -> Pending. Permissions: See exact permission-bit checks in the handler body. | eden_service/src/comm/migrations/refresh.rs:57 |