API Reference
API Reference Overview
A capability-oriented map of SOIT API surfaces.
SOIT APIs are grouped by capability under /api/v1. This reference is a high-level map with the main endpoint families per capability — for exact request schemas, use the generated OpenAPI docs at http://localhost:9200 when running SOIT locally.
API surfaces
| Prefix | Capability | Reference page |
|---|---|---|
/v1, /api/v1/tools, /mcp | OpenAI-compatible gateway, direct tool calls, MCP server | Gateway, Tools, and MCP API |
/api/v1/agents | Agent definitions, versions, releases, execution | Agents API |
/api/v1/threads, /api/v1/responses | Conversations and response execution | Threads and Responses API |
/api/v1/workflows | Workflow graphs, versions, execution control | Workflows API |
/api/v1/knowledge | Knowledge bases, documents, indexes, query | Knowledge API |
/api/v1/runs, /api/v1/tasks, /api/v1/observe, /api/v1/exports | Runtime ledger, observe views, evidence bundles, and ledger exports | Runs, Tasks, and Observe API |
/api/v1/evaluations | Regression runs and reports | Evaluation API |
/api/v1/notifications | Notification records and read state | Notifications API |
/api/v1/plugins | Plugin lifecycle, artifacts, runtime registry | Plugins API |
/api/v1/modelhub | Providers, model catalog, diagnostics | ModelHub API |
/api/v1 (identity routes) | Auth, tenants, workspaces, API keys, service principals | Identity API |
/api/v1/security, /api/v1/secrets | Egress policy, usage limits, secret references | Security and Secrets API |
/api/v1/billing | Budgets and their status | Budgets and Cost |
/api/v1/diagnostics | Live diagnostics for workspace owners, showing the edition and license from v1.4.0; the telemetry report at /diagnostics/telemetry for tenant admins (new in v1.4.0) | Editions and Licenses, Telemetry |
Conventions
All endpoints share the platform conventions:
- Envelope — responses under
/api/v1carrysuccess,code,message,data,request_id, andrun_id(when execution occurred). Routes under/v1answer in OpenAI's shapes instead, and/mcpand/.well-known/*in their protocols' own shapes. - Authentication — an API key is accepted as
Authorization: Bearer sk_…or inX-API-Key. - Rate limits — a call refused by a rate limit or a daily quota answers
429with aRetry-Afterheader and the codeRATE_LIMIT_EXCEEDED. - Scoping — tenant and workspace resolve from authentication context and headers, never from request parameters.
- Pagination — cursor-based:
page_size/page_tokenin,items/next_page_tokenout. - Idempotency — write APIs support an
Idempotency-Keyheader. - Health —
GET /health,/health/ready,/health/live, and/metricsare unversioned.