API reference

Operations are exactly those in the committed OpenAPI document (packages/workloom-api/openapi.json), which matches the route definitions; this site checks its list against both. Paths are under the API host. Public, approved packages and profiles can be read without a token; everything else needs one.

• Packages16 operations

  Push, read, approve, yank, unyank and deprecate package versions.

• Profiles6 operations

  Publish and read home profiles: named lists of exact-pinned package refs.

• Workspaces5 operations

  Create and update workspaces, and preview a render plan on the server.

• Content objects3 operations

  Upload and fetch content objects addressed by their SHA-256.

• Telemetry10 operations

  Ingest telemetry events, record workflow executions and read the analytics.

• Organizations6 operations

  Read organizations and set their SSO, telemetry and advisory review policies.

• Users and service accounts6 operations

  Read the signed-in user, manage roles and issue service-account tokens.

• Moderation7 operations

  Work the moderation queue and take packages down or restore them.

• Webhooks7 operations

  Subscribe URLs to audit events and inspect deliveries.

• Audit log and advisory review2 operations

  Read the organization’s audit events and run an advisory review.