Which Routes Support Which Auth

This page is generated from the canonical public auth inventory.

Route or familyStatusAuth modeUser permissionAPI-key scope
GET /api/agents/:idstableapi_key_or_access_tokenai.useagents:read
POST /api/agents/:id/runstableaccess_token_onlyai.usenot supported
GET /api/agent-runs/:idstableapi_key_or_access_tokenai.useruns:read
POST /api/agent-runs/:id/load-inputsstableapi_key_or_access_tokenai.useruns:read
POST /api/agent-runs/:id/rerun-from-stepstableaccess_token_onlyai.usenot supported
POST /api/setup/verifystableapi_key_or_access_tokenai.useruns:read
GET /api/modelsstableapi_key_or_access_tokenai.usemodels:read
GET /api/agentspublic betaapi_key_or_access_tokenai.useagents:read
POST /api/agentspublic betaapi_key_or_access_tokenai.useagents:write
PATCH /api/agents/:idpublic betaapi_key_or_access_tokenai.useagents:write
POST /api/agents/:id/versionspublic betaapi_key_or_access_tokenai.useagents:write
POST /api/agents/:id/publishpublic betaapi_key_or_access_tokenai.useagents:write
PUT /api/agent-versions/:id/workflowpublic betaapi_key_or_access_tokenai.useagents:write
POST /api/agent-versions/:id/workflow/validatepublic betaapi_key_or_access_tokenai.useagents:write
GET /api/agent-runs/comparepublic betaapi_key_or_access_tokenai.useruns:read
GET /api/agents/:id/versions/:versionId/diffpublic betaapi_key_or_access_tokenai.useagents:read
POST /api/agents/:id/versions/:versionId/rollbackpublic betaapi_key_or_access_tokenai.useagents:write
GET /api/skillspublic betaapi_key_or_access_tokenai.useskills:read
POST /api/skillspublic betaapi_key_or_access_tokenai.useskills:write
GET /api/skills/:idpublic betaapi_key_or_access_tokenai.useskills:read
PATCH /api/skills/:idpublic betaapi_key_or_access_tokenai.useskills:write
POST /api/skills/:id/versionspublic betaapi_key_or_access_tokenai.useskills:write
POST /api/skills/:id/publishpublic betaapi_key_or_access_tokenai.useskills:write
POST /api/skills/:id/previewpublic betaapi_key_or_access_tokenai.useskills:read
GET /api/skills/:id/versions/:versionId/diffpublic betaapi_key_or_access_tokenai.useskills:read
POST /api/skills/:id/runpublic betaaccess_token_onlyai.usenot supported
POST /api/skill-versions/:id/promptspublic betaapi_key_or_access_tokenai.useskills:write
POST /api/skill-versions/:id/toolspublic betaapi_key_or_access_tokenai.useskills:write
GET /api/skill-runs/:idpublic betaapi_key_or_access_tokenai.useruns:read
GET /api/toolspublic betaapi_key_or_access_tokenai.usetools:read
POST /api/toolspublic betaapi_key_or_access_tokenai.usetools:write
GET /api/tools/:idpublic betaapi_key_or_access_tokenai.usetools:read
PATCH /api/tools/:idpublic betaapi_key_or_access_tokenai.usetools:write
POST /api/tools/:id/versionspublic betaapi_key_or_access_tokenai.usetools:write
GET /api/tools/:id/versions/:versionId/diffpublic betaapi_key_or_access_tokenai.usetools:read
GET /api/skills/:id/evaluation-casespublic betaapi_key_or_access_tokenai.useevaluations:read
POST /api/skills/:id/evaluation-casespublic betaapi_key_or_access_tokenai.useevaluations:write
POST /api/skills/:id/evaluations/runpublic betaapi_key_or_access_tokenai.useevaluations:write
GET /api/skills/:id/evaluations/:evaluationRunIdpublic betaapi_key_or_access_tokenai.useevaluations:read

Anything not listed above should be treated as non-public or legacy unless the boundary page says otherwise.

See also

Was this page helpful?