API Reference

Liveness check for the production app and tool registry.

List the universal MCP tool registry exposed by Agent OS.

Self-service external-agent registration. Creates a private internal identifier automatically and returns a 90-day bearer token for universal MCP access.

Return the current external-agent registration details without reissuing the token.

List deployed agents and subagents for the current operator. Internal agent IDs are never returned; use the returned public action reference only when calling agent action routes.

Deploy a named subagent. Pass parentAgentRef from /api/agents when nesting under another deployed agent.

Create an AgentOS account, provision the default workspace surfaces, start a secure browser session, and return a 90-day bearer token only on plans with bearer access.

Authenticate an existing account, refresh the secure browser session, and return a fresh external bearer token.

Return the current authenticated browser session or bearer-backed session state. Internal identifiers are private and not displayed in public docs.

Clear the current browser session cookie.

Mint a fresh bearer token for external API, SDK, or CLI use while keeping the browser session active. Requires a plan with bearer-token capability.

List named scoped bearer tokens. Values are masked after one-time creation or rotation reveal.

Create a named scoped bearer token for workspace, project, app, workflow, MCP connector, external agent/tool, or API access.

Rename, rescope, rotate, or revoke a bearer token. Rotation returns the new bearer token once.

Revoke a bearer token without deleting its audit trail.

Transition the authenticated account and its primary workspace to another public beta plan. Free beta mode records the transition and applies no charge.

Optional example integration route: return the social-platform catalog, including which connectors are live and how many X accounts are currently connected.

Optional example integration route: start the X OAuth authorization flow for the current operator session.

Optional example integration route: list connected X accounts visible to the current operator without exposing private child-agent IDs.

Optional example integration route: list X drafts awaiting review, including guardrail status, reasons, and approval state.

Optional example integration route: list queued, published, failed, or canceled X publish items for the authenticated operator.

Optional example integration route: publish an approved X draft immediately or force a queued publish item to run now.

Request a password reset. Production returns a generic success response even when the account does not exist.

Confirm a password reset with the emailed token and a new password.

Execute any Agent OS primitive, runtime function, installed skill capability, or external MCP tool through the universal MCP router.

List universal MCP connectors with real tool counts, health, permission scope, last audit outcome, and related apps, workflows, and skills.

List recorded FFP runtime executions with route decisions, fallback lineage, invoker lineage, and related apps, workflows, and skills.

Read the disabled FFP compatibility status. All runtime execution bypasses FFP in v6.6.7.

Returns 405 Method Not Allowed. FFP cannot be activated in v6.6.7.

Run a Studio command. Mutating commands return a preview first and require a confirmation token on the second request.

Stream a Super AgentOS chat request while persisting an execution record, logs, final reply, approvals, and notifications.

Search persisted executions by status, source type, workflow, app, skill, session, workspace, or title.

Load one execution and its execution logs.

Persist an execution action request: pause, resume, retry, cancel, or rollback.

List recoverable executions for the Recovery Center.

Resume, retry, cancel, or rollback a recoverable execution.

Cancel active QUEUED, RUNNING, and PAUSED executions in scope and create a notification.

List task, approval, workflow, recovery, and panic notifications.

Create a notification or mark one read, unread, or archived.

Browse published Skill Store skills. Supports category, search, sort, page, limit, and author query params.

Browse the v6.6.7 Skill Store marketplace with ranked search, categories, installed state, grouped discovery rows, recommendations, and developer spotlight.

Preview input, output, execution example, and expected result before installing a capability.

Browse published App Store listings. Supports category, search, and sort query params.

Browse the v6.6.7 App Store with ranked search, installed priority, hero apps, featured, trending, recommended, new releases, recently updated, top installed, category rows, and developer spotlight.

Load a single App Store listing by slug. Includes visibility filtering and an owner flag when the caller is authenticated.

Resolve app readiness for the current viewer: installation state, required permissions, missing permissions, missing secrets, missing skills, updateAvailable, and target URLs.

Publish a full agentic app to the App Store automatically.

Install or update an app into the workspace after re-running readiness checks. Workspace install creates ownership, Library availability, an execution, activity, notification, and package cache where applicable.

Deploy a workspace-installed app to Android, iOS, Desktop, or PWA from Library using the cached workspace package. Does not require returning to App Store.

Remove only a local device install. Permanent marketplace ownership remains attached to the account.

List installed apps with available updates, release notes, current version, and installed version.

Update all available app updates for the current account.

Roll back an installed app to a prior recorded version while preserving ownership.

List installed apps and their readiness state for the current agent.

Open an installed app on a specific target. Re-runs readiness and returns typed failures when the app is stale.

Update installation state: favorite, permissionsApproved, active, or disabled.

Uninstall an app for the current agent.

Download an AgentOS app package for device or workspace installation.

Validate assignment and create a temporary runtime secret grant for a skill or app-backed runtime subject.

Consume or clean up a runtime secret grant from an authenticated SDK kernel runtime.

Install a published skill for the authenticated agent, approve permissions, and auto-resolve required dependencies.

Review, modify, or revoke installed skill permissions. Revoked required permissions block execution.

Load a public developer profile by safe public handle with published apps, skills, followers, downloads, and active users.

List installed skills for the authenticated agent.

Run a capability from an installed skill in the hardened skill runtime.

List or search governed files. Use action=preview or action=summarize with path for file-specific operations.

Upload or save a governed file and persist the file execution.

Rename a governed file and persist the file execution.

Delete a governed file by path and persist the file execution.

List, search, or export governed memory. Add export=1 to return the V6.6.2 memory export payload.

Create or update governed memory and persist the memory execution.

Delete governed memory by key and namespace and persist the memory execution.

Return public aggregate ops coverage and health metrics. Detailed internals are only returned to ops-admin callers.

Return the public crew coverage summary. The per-item active and standby matrix is redacted unless the caller has ops-admin access.

Idempotently restore active and standby coverage across the canonical feature catalog.

Force a failover for a specific feature or runtime-function slot.

Run the autonomous crew cron cycle manually using the cron secret or admin token.