ConstDELETE /api/debug/traces — empties the trace buffer.
POST /api/routes — creates a new route; returns the API's JSON acknowledgement.
POST /api/stores — creates a store; 409 when the name exists.
GET /api/debug/config — effective debug settings; answers even when debug is disabled.
DELETE /api/plugin-configs/{name} — removes the shared config; 400 while referenced.
DELETE /api/policies/{name} — removes the named policy; returns the API's JSON acknowledgement.
DELETE /api/routes/{name} — removes the named route; returns the API's JSON acknowledgement.
DELETE /api/sessions/{store}/{id} — revokes one session.
DELETE /api/sessions?store=…&subject=… — revokes every session for a subject.
DELETE /api/stores/{name} — removes the store; 409 in_use with referrers while referenced.
DELETE /api/supernodes/{name} — removes the definition; 400 while referenced.
GET /api/config/export — returns the live in-memory config (routes + policies) as a YAML string.
GET /api/plugin-configs/{name} — returns the named shared config.
GET /api/policies/{name} — returns the named policy.
GET /api/routes/{name} — returns the named route.
GET /api/supernodes/{name} — returns the named definition.
GET /api/debug/traces/{id} — one trace with per-step computed changes.
GET /api/acme/certs — managed certificate states; enabled: false when acme is not configured.
GET /api/env-vars — process environment variable names (no values), unwrapped from { names: [...] }.
GET /api/plugin-configs — returns all shared plugin configs.
GET /api/plugins — returns the catalog of available plugin types, unwrapped from { plugins: [...] }.
GET /api/policies — returns all configured policies.
GET /api/mcp/prompts — the precompiled agent prompts.
GET /api/routes — returns all configured routes.
GET /api/scripts — returns scripted-plugin files found on the gateway host, unwrapped from { scripts: [...] }.
GET /api/sessions?store=… — one page of session metadata; 501 on headless builds.
GET /api/stores — returns all named stores (raw ${ENV} placeholders, never resolved).
GET /api/supernodes — returns all supernode definitions.
GET /api/debug/traces — recorded traces, newest first, unwrapped from
{ traces: [...] }. Optional filter.policy / filter.limit /
filter.source are sent as query params (source maps to the
server-side TraceFilter.source, e.g. "request" | "sandbox" —
see src/admin/debug.rs); called with no args, behavior is unchanged
from before (all traces, default server-side limit).
The same endpoint, keeping the retention block the list response
carries. Separate from listTraces so the callers that only want rows
(var suggestions) stay unchanged; the Debug panel needs the window to
explain an empty result.
GET /api/vars — the context-variable catalog, unwrapped from { vars: [...] }.
GET /api/mcp/status — MCP availability; answers even when MCP is off.
POST /api/stores/{name}/ping — connectivity check; 502/504 unreachable, 501 headless build.
POST /api/config/reload — makes the gateway re-read gateway.yaml from disk; returns the API's JSON acknowledgement.
GET /api/mcp/prompts/{name}?… — a prompt rendered with live data.
POST /api/acme/certs/{id}/renew[?force=true] — 202 scheduled, 200 not_due, 409 in_progress, 404 unknown.
POST /api/debug/sandbox — runs ad-hoc nodes or a named policy against a synthetic context.
GET /api/status — returns gateway version plus route and policy counts.
PUT /api/plugin-configs/{name} — upserts the named shared config (also used to create).
PUT /api/policies/{name} — upserts the named policy (also used to create new policies); returns the API's JSON acknowledgement.
PUT /api/routes/{name} — replaces the named route; returns the API's JSON acknowledgement.
PUT /api/stores/{name} — upserts the named store.
PUT /api/supernodes/{name} — upserts the named definition (also used to create).
The gateway Admin API surface used by the editor.
All methods return promises and throw on non-2xx responses; mutating calls trigger route/policy revalidation on the gateway side.