HTTP route reference

This generated reference lists 255 externally relevant HTTP registrations at platform revision 36ac683868625334185afaababe582779c81de7b. It includes authenticated product routes, storefront and partner routes, provider callbacks, operational endpoints, and development tools.

It deliberately omits 90 internal-only, unresolved, or source-review-required registrations. Presence here documents a registered route, not universal external availability. Follow the service guide and source-backed authentication contract before use. Provider callback routes receive events from the named provider and are not customer request APIs.

Regenerate this page with pnpm generate:platform-inventory. Do not edit the tables manually.

accounting

Method	Path	Classification	Auth evidence	Source
GET	/api/agent-policy	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:772
POST	/api/auditcore/events	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:691
GET	/api/auditcore/export	authenticated-product-api	exportAuthz	apps/accounting-api/cmd/server/main.go:951
GET	/api/auditcore/provenance	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:761
POST	/api/billing/cancel-downgrade	authenticated-product-api	unspecified	apps/accounting-api/cmd/server/main.go:993
POST	/api/billing/checkout	authenticated-product-api	unspecified	apps/accounting-api/cmd/server/main.go:977
GET	/api/billing/dashboard	authenticated-product-api	unspecified	apps/accounting-api/cmd/server/main.go:984
POST	/api/billing/downgrade	authenticated-product-api	unspecified	apps/accounting-api/cmd/server/main.go:990
POST	/api/billing/portal-session	authenticated-product-api	unspecified	apps/accounting-api/cmd/server/main.go:980
GET	/api/billing/summary	authenticated-product-api	unspecified	apps/accounting-api/cmd/server/main.go:983
POST	/api/billing/upgrade	authenticated-product-api	unspecified	apps/accounting-api/cmd/server/main.go:987
POST	/api/entity-schema	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:809
POST	/api/entity-schema/backfill	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:822
GET	/api/founding-cohort/status	operational	unspecified	apps/accounting-api/cmd/server/main.go:996
GET	/api/invoices/{id}/pdf	authenticated-product-api	http.StatusUnauthorized, portalAuthz	apps/accounting-api/cmd/server/main.go:1004
POST	/api/query-records	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:784
POST	/api/reconciliation/commit	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:861
POST	/api/reconciliation/decide	authenticated-product-api	reconciliationViewAuthz	apps/accounting-api/cmd/server/main.go:871
POST	/api/reconciliation/disposition	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:881
POST	/api/reconciliation/state	authenticated-product-api	reconciliationViewAuthz	apps/accounting-api/cmd/server/main.go:843
POST	/api/reconciliation/validate-proposal	authenticated-product-api	reconciliationViewAuthz	apps/accounting-api/cmd/server/main.go:850
POST	/api/update-record	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:796
ANY	/graphql	authenticated-product-api	portalAuthz	apps/accounting-api/cmd/server/main.go:656
ANY	/health	operational	unspecified	apps/accounting-api/cmd/server/main.go:618
POST	/webhooks/avalara/1099	provider-callback	unspecified	apps/accounting-api/cmd/server/main.go:688
POST	/webhooks/braintree	provider-callback	unspecified	apps/accounting-api/cmd/server/main.go:682
POST	/webhooks/paypal	provider-callback	unspecified	apps/accounting-api/cmd/server/main.go:679
POST	/webhooks/plaid	provider-callback	unspecified	apps/accounting-api/cmd/server/main.go:685
ANY	/webhooks/stripe	provider-callback	unspecified	apps/accounting-api/cmd/server/main.go:673
ANY	/webhooks/stripe/billing	provider-callback	unspecified	apps/accounting-api/cmd/server/main.go:676

commerce

Method	Path	Classification	Auth evidence	Source
ANY	/agentic/	public-integration	unspecified	apps/commerce-api/cmd/server/main.go:1354
ANY	/agentic/acp/	public-integration	unspecified	apps/commerce-api/internal/agenticroutes/routes.go:31
POST	/agentic/acp/{brand_id}/checkout_sessions	public-integration	unspecified	apps/commerce-api/internal/acpcheckout/handler.go:64
GET	/agentic/acp/{brand_id}/checkout_sessions/{checkout_session_id}	public-integration	unspecified	apps/commerce-api/internal/acpcheckout/handler.go:65
POST	/agentic/acp/{brand_id}/checkout_sessions/{checkout_session_id}	public-integration	unspecified	apps/commerce-api/internal/acpcheckout/handler.go:66
POST	/agentic/acp/{brand_id}/checkout_sessions/{checkout_session_id}/cancel	public-integration	unspecified	apps/commerce-api/internal/acpcheckout/handler.go:68
POST	/agentic/acp/{brand_id}/checkout_sessions/{checkout_session_id}/complete	public-integration	unspecified	apps/commerce-api/internal/acpcheckout/handler.go:67
ANY	/agentic/ucp/	public-integration	unspecified	apps/commerce-api/internal/agenticroutes/routes.go:29
POST	/agentic/ucp/{brand_id}/carts	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:77
GET	/agentic/ucp/{brand_id}/carts/{cart_id}	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:78
POST	/agentic/ucp/{brand_id}/carts/{cart_id}/items	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:79
DELETE	/agentic/ucp/{brand_id}/carts/{cart_id}/items/{item_id}	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:81
POST	/agentic/ucp/{brand_id}/carts/{cart_id}/items/{item_id}	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:80
GET	/agentic/ucp/{brand_id}/catalog/offers	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:75
GET	/agentic/ucp/{brand_id}/catalog/offers/{offer_id}	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:76
POST	/agentic/ucp/{brand_id}/checkout-sessions	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:82
GET	/agentic/ucp/{brand_id}/checkout-sessions/{checkout_session_id}	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:83
POST	/agentic/ucp/{brand_id}/checkout-sessions/{checkout_session_id}	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:84
POST	/agentic/ucp/{brand_id}/checkout-sessions/{checkout_session_id}/cancel	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:86
POST	/agentic/ucp/{brand_id}/checkout-sessions/{checkout_session_id}/complete	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:85
POST	/agentic/ucp/{brand_id}/mcp	public-integration	unspecified	apps/commerce-api/internal/agenticroutes/routes.go:30
POST	/agentic/ucp/{brand_id}/mcp	public-integration	unspecified	apps/commerce-api/internal/ucpmcp/handler.go:68
GET	/agentic/ucp/{brand_id}/orders/{order_id}	public-integration	unspecified	apps/commerce-api/internal/ucprest/handler.go:87
ANY	/api/v1/	authenticated-product-api	portalAuthz	apps/commerce-api/cmd/server/main.go:966
ANY	/api/v1/imports/	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:101
ANY	/api/v1/imports/csv/formats	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:98
ANY	/api/v1/imports/csv/upload	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:97
ANY	/api/v1/imports/files/confirm	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:100
ANY	/api/v1/imports/files/presign	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:99
ANY	/api/v1/imports/start	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:96
ANY	/api/v1/products/delete	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:102
ANY	/api/v1/products/delete-bulk	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:103
ANY	/api/v1/products/media/confirm	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:118
ANY	/api/v1/products/media/presign	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:117
ANY	/api/v1/products/media/upload	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:116
ANY	/api/v1/products/purge	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:105
ANY	/api/v1/products/restore	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:104
ANY	/api/v1/push/all	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:112
ANY	/api/v1/push/bulk	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:111
ANY	/api/v1/push/cancel	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:115
ANY	/api/v1/push/enqueue	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:110
ANY	/api/v1/push/retry	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:114
ANY	/api/v1/push/status	operational	unspecified	apps/commerce-api/internal/imports/api.go:113
ANY	/api/v1/reconciliation/accept	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:106
ANY	/api/v1/reconciliation/link	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:108
ANY	/api/v1/reconciliation/reject	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:107
ANY	/api/v1/reconciliation/summary	authenticated-product-api	unspecified	apps/commerce-api/internal/imports/api.go:109
GET	/customer-auth/v1/oauth/google/callback	public-integration	sfAPI.GoogleOAuthCallback, sfAuthRateLimiter.Middleware	apps/commerce-api/cmd/server/main.go:1324
GET	/customer-auth/v1/oauth/google/callback	public-integration	a.GoogleOAuthCallback	apps/commerce-api/internal/storefront/api.go:152
POST	/customer-auth/v1/oauth/google/callback	public-integration	sfAPI.GoogleOAuthCallback, sfAuthRateLimiter.Middleware	apps/commerce-api/cmd/server/main.go:1331
POST	/customer-auth/v1/oauth/google/callback	public-integration	a.GoogleOAuthCallback	apps/commerce-api/internal/storefront/api.go:153
ANY	/graphql	authenticated-product-api	portalAuthz	apps/commerce-api/cmd/server/main.go:934
ANY	/health	operational	unspecified	apps/commerce-api/cmd/server/main.go:914
GET	/shopify/callback	public-integration	unspecified	apps/commerce-api/cmd/server/main.go:1401
GET	/shopify/install	public-integration	shopifyOAuth.HandleInstallHTTP	apps/commerce-api/cmd/server/main.go:1400
ANY	/storefront/v1/	public-integration	customerAuthSvc, customers.AuthMiddleware	apps/commerce-api/cmd/server/main.go:1339
ANY	/storefront/v1/account	public-integration	authed	apps/commerce-api/internal/storefront/api.go:186
GET	/storefront/v1/account	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:157
PUT	/storefront/v1/account	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:158
ANY	/storefront/v1/account/	public-integration	authed	apps/commerce-api/internal/storefront/api.go:187
GET	/storefront/v1/account/addresses	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:173
POST	/storefront/v1/account/addresses	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:174
DELETE	/storefront/v1/account/addresses/{id}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:176
PUT	/storefront/v1/account/addresses/{id}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:175
PUT	/storefront/v1/account/addresses/{id}/default	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:177
GET	/storefront/v1/account/b2b	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:159
GET	/storefront/v1/account/b2b/quotes	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:160
GET	/storefront/v1/account/b2b/quotes/{id}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:161
POST	/storefront/v1/account/b2b/quotes/{id}/accept	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:165
POST	/storefront/v1/account/b2b/quotes/{id}/approve	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:163
POST	/storefront/v1/account/b2b/quotes/{id}/reject	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:164
POST	/storefront/v1/account/b2b/quotes/{id}/submit	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:162
GET	/storefront/v1/account/orders	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:170
GET	/storefront/v1/account/orders/{id}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:171
POST	/storefront/v1/account/orders/{id}/reorder	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:172
GET	/storefront/v1/account/portal	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:166
GET	/storefront/v1/account/portal/downloads	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:168
GET	/storefront/v1/account/portal/invoices	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:167
GET	/storefront/v1/account/portal/payment-methods	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:169
GET	/storefront/v1/account/wishlist	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:178
POST	/storefront/v1/account/wishlist/items	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:179
DELETE	/storefront/v1/account/wishlist/items/{id}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:180
POST	/storefront/v1/account/wishlist/items/{id}/add-to-cart	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:181
GET	/storefront/v1/ai-search	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:128
ANY	/storefront/v1/auth/	public-integration	auth, customerAuthSvc, customers.AuthMiddleware, sfAuthMux, sfAuthRateLimiter.Middleware, sfSDKAuthRateLimiter.Middleware	apps/commerce-api/cmd/server/main.go:1295
POST	/storefront/v1/auth/challenge	public-integration	sfAPI.CreateAuthChallenge, sfAuthMux	apps/commerce-api/cmd/server/main.go:1289
POST	/storefront/v1/auth/challenge	public-integration	a.CreateAuthChallenge	apps/commerce-api/internal/storefront/api.go:143
POST	/storefront/v1/auth/logout	public-integration	sfAuthMux	apps/commerce-api/cmd/server/main.go:1292
POST	/storefront/v1/auth/logout	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:146
POST	/storefront/v1/auth/logout-all	public-integration	sfAuthMux	apps/commerce-api/cmd/server/main.go:1293
POST	/storefront/v1/auth/logout-all	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:147
GET	/storefront/v1/auth/oauth/google/callback	public-integration	sfAPI.GoogleOAuthCallback, sfAuthRateLimiter.Middleware	apps/commerce-api/cmd/server/main.go:1309
GET	/storefront/v1/auth/oauth/google/callback	public-integration	a.GoogleOAuthCallback	apps/commerce-api/internal/storefront/api.go:149
POST	/storefront/v1/auth/oauth/google/callback	public-integration	sfAPI.GoogleOAuthCallback, sfAuthRateLimiter.Middleware	apps/commerce-api/cmd/server/main.go:1316
POST	/storefront/v1/auth/oauth/google/callback	public-integration	a.GoogleOAuthCallback	apps/commerce-api/internal/storefront/api.go:150
POST	/storefront/v1/auth/oauth/google/start	public-integration	sfAPI.StartGoogleOAuth, sfAuthMux	apps/commerce-api/cmd/server/main.go:1294
POST	/storefront/v1/auth/oauth/google/start	public-integration	a.StartGoogleOAuth	apps/commerce-api/internal/storefront/api.go:148
POST	/storefront/v1/auth/refresh	public-integration	sfAuthMux	apps/commerce-api/cmd/server/main.go:1291
POST	/storefront/v1/auth/refresh	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:145
POST	/storefront/v1/auth/verify	public-integration	sfAPI.VerifyAuthChallenge, sfAuthMux	apps/commerce-api/cmd/server/main.go:1290
POST	/storefront/v1/auth/verify	public-integration	a.VerifyAuthChallenge	apps/commerce-api/internal/storefront/api.go:144
GET	/storefront/v1/blog	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:123
GET	/storefront/v1/blog/{slug}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:124
POST	/storefront/v1/cart	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:112
DELETE	/storefront/v1/cart/{cartId}/items/{itemId}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:116
PUT	/storefront/v1/cart/{cartId}/items/{itemId}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:115
GET	/storefront/v1/cart/{id}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:113
POST	/storefront/v1/cart/{id}/items	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:114
GET	/storefront/v1/cart/recommendations	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:137
POST	/storefront/v1/checkout	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:118
GET	/storefront/v1/collections	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:105
GET	/storefront/v1/collections/{slug}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:106
GET	/storefront/v1/component-contracts	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:131
GET	/storefront/v1/component-contracts/{name}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:132
GET	/storefront/v1/config	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:129
GET	/storefront/v1/discounts/active	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:119
POST	/storefront/v1/discounts/validate	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:120
GET	/storefront/v1/forms/{formId}/schema	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:139
POST	/storefront/v1/forms/{formId}/submit	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:140
DELETE	/storefront/v1/inventory/notify-when-available	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:134
POST	/storefront/v1/inventory/notify-when-available	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:133
GET	/storefront/v1/orders/recent-count	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:121
GET	/storefront/v1/page-compositions/{template}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:130
GET	/storefront/v1/pages/{slug}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:122
GET	/storefront/v1/products	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:103
GET	/storefront/v1/products/{id}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:104
GET	/storefront/v1/products/{id}/recommendations	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:135
GET	/storefront/v1/products/{id}/reviews	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:136
POST	/storefront/v1/products/{id}/reviews	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:193
POST	/storefront/v1/recommendations/track	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:138
GET	/storefront/v1/redirects	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:111
POST	/storefront/v1/returns	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:197
GET	/storefront/v1/returns/{rma}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:198
GET	/storefront/v1/robots.txt	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:110
GET	/storefront/v1/search	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:125
GET	/storefront/v1/search/advanced	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:126
GET	/storefront/v1/search/autocomplete	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:127
POST	/storefront/v1/shipping/rates	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:117
GET	/storefront/v1/sitemap.xml	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:109
GET	/storefront/v1/structured-data/collections/{slug}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:108
GET	/storefront/v1/structured-data/products/{slug}	public-integration	unspecified	apps/commerce-api/internal/storefront/api.go:107
POST	/webhooks/billing	provider-callback	unspecified	apps/commerce-api/cmd/server/main.go:1375
POST	/webhooks/shipstation	provider-callback	unspecified	apps/commerce-api/cmd/server/main.go:1379
POST	/webhooks/shopify	provider-callback	unspecified	apps/commerce-api/cmd/server/main.go:1390
POST	/webhooks/stripe	provider-callback	unspecified	apps/commerce-api/cmd/server/main.go:1365

customer360

Method	Path	Classification	Auth evidence	Source
ANY	/graphql	authenticated-product-api	portalAuthz	apps/customer360-api/cmd/server/main.go:216
ANY	/health	operational	unspecified	apps/customer360-api/cmd/server/main.go:194

portal

Method	Path	Classification	Auth evidence	Source
POST	/api/billing/cancel-downgrade	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:459
POST	/api/billing/checkout	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:455
GET	/api/billing/dashboard	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:454
POST	/api/billing/downgrade	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:458
POST	/api/billing/portal-session	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:456
GET	/api/billing/summary	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:453
POST	/api/billing/upgrade	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:457
GET	/api/byok/keys	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:536
POST	/api/byok/keys	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:537
DELETE	/api/byok/keys/{provider}	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:538
POST	/api/external-agent/signup	public-integration	unspecified	apps/portal-api/cmd/server/main.go:477
GET	/api/founding-cohort/status	operational	unspecified	apps/portal-api/cmd/server/main.go:460
DELETE	/api/model-negotiation/preferences	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:547
GET	/api/model-negotiation/preferences	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:545
PUT	/api/model-negotiation/preferences	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:546
GET	/api/model-negotiation/settings-summary	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:554
ANY	/graphql	authenticated-product-api	unspecified	apps/portal-api/cmd/server/main.go:483
ANY	/health	operational	unspecified	apps/portal-api/cmd/server/main.go:438
ANY	/playground	development-only	unspecified	apps/portal-api/cmd/server/main.go:484
ANY	/webhooks/stripe	provider-callback	unspecified	apps/portal-api/cmd/server/main.go:445

reporting

Method	Path	Classification	Auth evidence	Source
MOUNT	/api/v1/reporting	authenticated-product-api	portalAuthz	apps/reporting-api/cmd/server/main.go:251
GET	/api/v1/reporting/ai/queries	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:114
GET	/api/v1/reporting/ai/queries/{queryID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:115
GET	/api/v1/reporting/ai/queries/{queryID}/feedback	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:119
POST	/api/v1/reporting/ai/queries/{queryID}/feedback	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:120
POST	/api/v1/reporting/ai/queries/execute	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:118
POST	/api/v1/reporting/ai/queries/generate-sql	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:116
POST	/api/v1/reporting/ai/queries/validate-sql	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:117
GET	/api/v1/reporting/analytics/cohort-analysis	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:128
GET	/api/v1/reporting/analytics/cross-org-summary	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:127
GET	/api/v1/reporting/analytics/export	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:129
POST	/api/v1/reporting/analytics/export/refresh	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:130
GET	/api/v1/reporting/analytics/health-summary	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:132
GET	/api/v1/reporting/analytics/trends	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:126
GET	/api/v1/reporting/dashboards	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:98
POST	/api/v1/reporting/dashboards	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:99
DELETE	/api/v1/reporting/dashboards/{dashboardID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:103
GET	/api/v1/reporting/dashboards/{dashboardID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:101
PUT	/api/v1/reporting/dashboards/{dashboardID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:102
GET	/api/v1/reporting/dashboards/{dashboardID}/widgets	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:105
POST	/api/v1/reporting/dashboards/{dashboardID}/widgets	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:106
PUT	/api/v1/reporting/dashboards/{dashboardID}/widgets/layout	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:107
POST	/api/v1/reporting/dashboards/persona-defaults	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:100
GET	/api/v1/reporting/developer/manifest	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:136
GET	/api/v1/reporting/experiments/results	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:135
GET	/api/v1/reporting/funnel/cross-pillar	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:134
GET	/api/v1/reporting/insights	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:122
POST	/api/v1/reporting/insights/{snapshotID}/deliver	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:124
POST	/api/v1/reporting/insights/generate-nightly	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:123
GET	/api/v1/reporting/report-runs	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:84
GET	/api/v1/reporting/report-runs/{runID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:85
GET	/api/v1/reporting/report-runs/{runID}/download	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:86
GET	/api/v1/reporting/report-schedules	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:88
POST	/api/v1/reporting/report-schedules	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:89
DELETE	/api/v1/reporting/report-schedules/{scheduleID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:92
GET	/api/v1/reporting/report-schedules/{scheduleID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:90
PUT	/api/v1/reporting/report-schedules/{scheduleID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:91
POST	/api/v1/reporting/report-schedules/{scheduleID}/run	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:93
POST	/api/v1/reporting/report-schedules/run-due	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:94
GET	/api/v1/reporting/report-templates	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:76
POST	/api/v1/reporting/report-templates	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:77
DELETE	/api/v1/reporting/report-templates/{templateID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:80
GET	/api/v1/reporting/report-templates/{templateID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:78
PUT	/api/v1/reporting/report-templates/{templateID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:79
POST	/api/v1/reporting/report-templates/{templateID}/generate	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:82
POST	/api/v1/reporting/report-templates/{templateID}/run	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:81
GET	/api/v1/reporting/reports/catalog	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:83
GET	/api/v1/reporting/status	operational	unspecified	apps/reporting-api/cmd/server/main.go:142
GET	/api/v1/reporting/widget-catalog	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:96
DELETE	/api/v1/reporting/widgets/{widgetID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:111
GET	/api/v1/reporting/widgets/{widgetID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:109
PUT	/api/v1/reporting/widgets/{widgetID}	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:110
GET	/api/v1/reporting/widgets/{widgetID}/data	authenticated-product-api	unspecified	apps/reporting-api/internal/api/handlers.go:112
GET	/health	operational	unspecified	apps/reporting-api/cmd/server/main.go:173

studio

Method	Path	Classification	Auth evidence	Source
ANY	/api/v1/webhooks/github	provider-callback	unspecified	apps/studio-api/cmd/server/main.go:285
ANY	/graphql	authenticated-product-api	portalAuthz	apps/studio-api/cmd/server/main.go:301
ANY	/health	operational	unspecified	apps/studio-api/cmd/server/main.go:262
ANY	/playground	development-only	unspecified	apps/studio-api/cmd/server/main.go:309