Node API

Unstable

Surfaces

exo-gateway exposes a REST surface and a GraphQL surface. Health probes and a small admin set are also exposed.

Authentication

API keys created at /app/api-keys authenticate gateway requests. Keys are scoped per-org and per-capability. Rotate regularly. Never embed keys in client code.

Endpoint shape (excerpt)

POST   /v1/actors                 register an actor
POST   /v1/avc/issue              issue an AVC
POST   /v1/avc/validate           validate an AVC
POST   /v1/avc/revoke             revoke an AVC
POST   /v1/receipts/trust         emit a trust receipt
POST   /v1/settlement/quote       request a settlement quote (zero-priced)
POST   /v1/settlement/commit      commit a quote into a settlement receipt
GET    /v1/custody/:actor_id      fetch custody trail for an actor
GET    /healthz, /readyz, /livez  health probes

The full OpenAPI document will be served at /api once the gateway publishes it.