Skip to content
Docs
Search
Ctrl
K
Cancel
Overview
Concepts
Member roles
Permissions & scopes
API keys
Workspaces
Agent roles & providers
Content packs
Credentials & secrets
Reference
caps.yaml
Audit events
API reference
Overview
Session
Overview
Resolved-caller identity + cross-org membership list
API keys
Overview
List API keys
Create an API key
Revoke an API key
Memberships
Overview
List memberships in an org
Invite a member
Remove a member (or revoke a pending invitation)
Change a member's role
Providers
Overview
List providers
Create a provider
Get one provider
Delete a provider
Update a provider
Archive a provider (cascades to agent roles)
Unarchive a provider
Agent roles
Overview
List agent roles
Create an agent role
Get one agent role
Delete an agent role
Update an agent role
Archive an agent role
Unarchive an agent role
Stop every running workspace using this role
Aggregated proxy decisions for compliance review
Workspaces
Overview
List workspaces
Create a workspace (empty, no initial task)
Stop every running workspace in the caller's org
Get one workspace
Stop a workspace (snapshot + pod tear-down)
Resume a stopped workspace
Restart the workspace pod
Archive a workspace
Unarchive a workspace
Fork the workspace at a point in its task history
Cancel the workspace's currently-running task
Workspace activity history
Audit events scoped to this workspace
PromQL-shaped aggregation over a single workspace's audit log
Current budget counters for a workspace
Get the agent's enriched session view
List files in the workspace sandbox (live)
Read a sandbox file as JSON (live)
Stream a sandbox file as raw bytes (live, binary-safe, uncapped)
List files in the workspace snapshot (stopped)
Read a single file from the snapshot as JSON
Stream a snapshot file as raw bytes (binary-safe, uncapped)
Tasks
Overview
Create a workspace and submit the initial task atomically
List tasks for a workspace
Submit a follow-up task on an existing workspace
Get a single task by id
Credentials
Overview
List credentials visible to the caller
Create a credential
Get a credential by id
Delete a credential
Start the OAuth consent flow
Secrets
Overview
List secret names (values never returned)
Store a new secret in Vault
Delete a secret from Vault
Content packs
Overview
List packs visible to the caller
Create a pack from an existing OCI image
Get a pack by id
Re-create the pack from a new OCI image
Delete a pack
Update pack visibility (org-owned packs only)
Upload pack contents as a multipart archive
Re-upload pack contents (org-owned packs only)
List files inside a pack's image
Read a single file from a pack's image
Replace a single file inside a pack (org-owned packs only)
Clone a visible pack into the caller's org
Audit
Overview
Query the audit log
PromQL-shaped aggregation over the audit log
Streams
Overview
Org-wide live activity stream (SSE)
Workspace-scoped live activity stream (SSE)
Live pool / pod stats per agent role (SSE)
Config
Overview
Runtime config exposed to authenticated callers
CLI
Guides
Governed GitLab contributor
Overview
Session
Section titled “Session”
Resolved caller identity and memberships
Operations
Section titled “ Operations ”
GET
/me/session
