operator-api
The /api/v1 operator surface (ADR-0023): register agents and vend endpoints as the signed-in human. Every request requires an OPERATOR OAuth bearer — an OAuth token minted by the authorization-code + PKCE flow with resource = <base>/api (ADR-0019), which the switchboard CLI obtains gh-style. There is no static API token.
List the authenticated operator's registered agents
List the authenticated operator's registered agents
Register an agent and vend its endpoint in one call
The ADR-0023 one-call mint: agent + scoped endpoint (MCP URL + bearer credential) +
List the authenticated operator's vended endpoints (never credentials)
List the authenticated operator's vended endpoints (never credentials)
Edit an endpoint's settings (its default claim lease)
Edits the settings of an endpoint you own that are not scope (ADR-0043). Today that is
Add to an endpoint's scope without re-vending it (additive only)
Widens the grant of an active endpoint you own by adding to it: queues its webhooks may route to,
The audit trail of scope widenings for one endpoint
Every additive scope change this endpoint has had, newest first: the field, the value it replaced,
Hand an endpoint you own a todo and ring its doorbell
The operator's hand (ADR-0040): mints one todo on the named endpoint and rings its
List the webhooks your endpoints own (never ingest URLs or secrets)
Every webhook whose owning endpoint belongs to the authenticated human, active endpoints
Say where this webhook's provider lives, and store its read-only token
Where a reconcile read would dial for this webhook, and the read-only credential that
Read a webhook's routing rules, default, params and grant
The shape `list_webhook_rules` returns (ADR-0024, SPEC-0020), from the same code. The
Replace a webhook's routing configuration
`set_webhook_rules` through the same save path: validation against the grant, a dry run
Dry-run routing against a stored delivery or a sample payload
`test_webhook_rules`: evaluates the saved rules, or candidate `rules`/`default_action`/
List the endpoints a webhook delivers to
`list_webhook_routes` (ADR-0022), from the same code: the owning endpoint, which is always a
Add a route, naming the target in the body
The same operation as addWebhookRoute, for a client that holds the target id in a body as
Make an endpoint a delivery target of a webhook
`add_webhook_route`, through the same checks: the target must be an active endpoint of the
Stop delivering a webhook to an endpoint
`remove_webhook_route`. Succeeds whether or not the route existed; the owning endpoint