# ConusAI — LLM index

> Machine-readable index of the Temps unified HTTP API.
> Generated from `contracts/openapi.json` by `scripts/docs/generate-llms.py`.
> For the complete operation-level surface, see `llms-full.txt`.
> Policy: `docs/architecture/ai-stack.md`.

## API overview

- OpenAPI version: `3.1.0`
- API title: ConusAI
- API version: `1.0.0`
- Total paths: 1052
- Total operations: 1273

## Tags

- `AI Chat`
- `AI Chat v1` — Path-scoped AI debugging conversations and their AG-UI chat runs
- `AI Gateway` — OpenAI-compatible chat, embeddings, and model endpoints, and local reranking
- `AI Gateway Admin` — Provider key management endpoints
- `AI Gateway Budget` — AI+OCR budget status
- `AI Gateway Pricing` — Model pricing endpoints
- `AI Gateway v1` — Path-scoped AI gateway endpoints
- `AI Tool Actions`
- `AI Tools` — The organization's tool registry (ADR-039)
- `AI tools`
- `API Keys` — API key management on the org path-scoped surface `/v1/orgs/{org_slug}/api-keys/...`. The organization is proven from the URL against `organization_members`, so the surface accepts browser sessions as well as org-bound API keys.
- `AdminGate`
- `Agents` — Autonomous AI agents, autofixer (interactive AI debugging), skills/MCP definitions, and preview gateway management.
- `Agents v1` — The same agent surface addressed by the canonical path scope. Project-scoped operations live under `/v1/orgs/{org_slug}/workspaces/{workspace_slug}/projects/{project_slug}/...`; the org-scoped `/settings/...` operations stop at `/v1/orgs/{org_slug}/...`, because the services behind them filter on `organization_id` alone. Every operation here reaches the same code as its `Agents` twin; the difference is that the tenant is proven from the URL rather than derived from the credential.
- `Alarms v1`
- `Analytics` — Analytics and session replay management
- `Analytics v1`
- `App binding`
- `Audit`
- `Audit Logs`
- `Audit Logs v1`
- `Audit ingest`
- `Audit v2`
- `Authentication` — Authentication and authorization endpoints
- `Autofixer`
- `Autofixer v1` — The interactive AI debugging surface addressed by the canonical project path scope. Each operation delegates to its `Autofixer` twin, so the permission guard, the project-scope assertion and the audit entry are the same instructions rather than a second copy.
- `Backups v1` — Path-scoped organization backup management
- `Billing`
- `Blob` — Blob storage operations
- `Blob Management` — Blob service management operations
- `Blob Management v1` — Path-scoped blob service management under /v1/orgs/{org_slug}
- `Consumer Deploy`
- `Customer Billing v1` — Usage-based billing an organization runs against its own SaaS customers
- `DNS`
- `DNS Providers v1` — Path-scoped organization DNS provider management
- `Dashboards v1`
- `Deployments v1`
- `Domains v1`
- `Email Domains v1` — Path-scoped email domain management
- `Email Providers v1` — Path-scoped email provider management
- `Email Tracking` — Email open and click tracking
- `Email Tracking v1` — Path-scoped email open and click tracking
- `Email Validation` — Email address validation and verification
- `Emails v1` — Path-scoped email sending and retrieval
- `Entitlements`
- `Environments` — Environment management operations
- `Environments v1`
- `Error Tracking v2`
- `Events v1` — Path-scoped analytics event endpoints
- `External Plugins` — External plugin management and discovery
- `Files` — Organization-confined platform files
- `Funnels v1` — Path-scoped funnel management endpoints
- `GenAI` — GenAI agent activity tracing endpoints
- `Git Providers` — Git provider management endpoints
- `Git Providers v1`
- `Guides`
- `IP Access Control` — IP access control management endpoints
- `Identity admissions v1` — A linked app's own admission credential admits an address with the app-access role user (R6)
- `Imports` — Import workloads from external sources
- `Insights`
- `Internal DNS` — Per-node DNS resolver sync (ADR-011)
- `KV Management v1` — Path-scoped KV service management operations
- `KV Store v1` — Path-scoped key-value storage operations
- `Knowledge v1` — Index and search project knowledge collections
- `Licensing`
- `Live` — CLP/1 change streams (live protocol)
- `Load Balancer` — Load balancer management endpoints
- `Logs v1` — Path-scoped log search, context, tail, and retention
- `Metering`
- `Metering (Admin)`
- `Metric Alerts v1`
- `Metrics` — Time-series metrics and alert rule endpoints
- `Modules` — Services installed on this instance and enabled per organization (ADR-053). Install, upgrade, export and remove are operator acts of the Rust `conusai modules` CLI.
- `Monitoring`
- `Native service prerequisites`
- `Nodes`
- `Notification Delivery Log` — Outbox messages, their attempts and manual retries
- `Notification Preferences` — User notification preferences and settings
- `Notification Providers v1` — Path-scoped notification provider endpoints under /v1/orgs/{org_slug}
- `Notification Templates` — Operator-editable message templates and the event catalogue
- `Notifications v1`
- `OCR v1` — Read documents with the platform OCR service
- `OTel` — Query endpoints for the monitoring UI
- `OTel Ingest` — OTLP/HTTP ingest endpoints (protobuf and OTLP/JSON)
- `Obs` — Observe agent surface (observe-sdk P5.5): start analysis runs, read run status, pin timeline annotations, and read the changes feed. Writes require obs:write for API-key callers (D20).
- `Observability v1`
- `Observe browser`
- `Organizations` — Organization and membership management
- `Organizations v1` — The organization surface, addressed by the canonical org path scope `/v1/orgs/{org_slug}/...`. The tenant is proven from the URL against `organization_members`, and every operation authorizes against the caller's organization role as that scope resolved it, with an API key capped at its stored role.
- `Performance` — Performance metrics management
- `Performance v1`
- `Platform` — Platform information and compatibility
- `PlatformVersion`
- `Postgres Upgrades v1`
- `Presets` — Available deployment presets
- `Preview Gateway`
- `Privacy` — Erasure and export of one person's analytics, replay, error, proxy-log, log and trace data (ADR-049)
- `Projects` — Project management endpoints
- `Projects v1` — Path-scoped project endpoints (/v1/orgs/{org_slug}/workspaces/{workspace_slug}/...)
- `Proxy Logs`
- `Public Repositories` — Endpoints for accessing public repositories without authentication. Supports GitHub and GitLab.
- `Relay`
- `Release inventory`
- `Resolution v1` — Bounded deterministic supplied-candidate comparison and the plan ledger: immutable plans, human decisions, apply-once claims and reported outcomes
- `Restore v1` — Path-scoped organization restore operations
- `Revenue` — Per-project revenue tracking integrations and analytics
- `Revenue v1`
- `Sandboxes` — Standalone sandbox API (`/v1/sandboxes/*`) for running isolated containers.
- `Sandboxes v1` — Path-scoped workspace sandbox management
- `Secrets` — File-mounted secrets (/run/secrets/<KEY>)
- `Secrets v1` — Agent secrets addressed by the canonical org path scope, `/v1/orgs/{org_slug}/settings/secrets`. Values stay masked in every response, exactly as on the `Secrets` twin it delegates to.
- `Service gateway` — Every service owns its name as a path segment at the levels it declares (ADR-053 decision 6). Linked services serve their own routes; this catch-all answers for names no route matched. Each service documents its own API.
- `Service types` — Service types catalog endpoints
- `Services` — Managed service endpoints
- `Services v1` — Path-scoped workspace service management
- `Session Replay v1`
- `Settings`
- `Status Page v1`
- `Support`
- `Support Channels` — Channel CRUD, team and webhooks (support:admin)
- `Support Contact` — Widget-session contact surface: sessions, conversations, messages
- `Support Data Protection` — Contact export, rectification and erasure (spec §17)
- `Support Inbox` — Agent inbox, ownership transitions and presence (support:read / support:handle)
- `Support Knowledge` — Channel knowledge base: documents and cited search (support:admin)
- `Telemetry Logs`
- `Telemetry Metrics`
- `Telemetry v1`
- `Templates` — Project template endpoints
- `Traces`
- `Usage`
- `Usage (Admin)`
- `Usage v1` — Path-scoped organization usage metering
- `Users` — User management endpoints
- `VPN` — Client VPN & subnet access (ADR-009)
- `Vulnerability Scans v1`
- `Webhooks` — Webhook management endpoints
- `Webhooks v1` — Path-scoped webhook management endpoints
- `Workspaces` — Organization workspace management
- `Workspaces v1` — Path-scoped organization workspace management
- `dsn-v1`
- `error-alert-rules-v1`
- `error-tracking-v1`
- `error-tracking-v2`
- `geo` — Geolocation API endpoints
- `sentry-compat`
- `sentry-ingestor`
- `source-maps-v1`

See `llms-full.txt` for request/response schemas, parameters, and full operation details.
