GET /api/org — profile fields shown on General settings / the wizard.

Responses

Security: bearer

PATCH /api/org — updates name and/or ticket prefix (Admin:edit). Idempotent; emits `org.updated` + audit row.

Request body

PatchOrgRequest

Responses

Security: bearer

GET /api/org/pod-visibility — the org's stored matrix; `config` is `{}` when the org never customized (clients fall back to their registry defaults, defaults-first).

Responses

Security: bearer

PUT /api/org/pod-visibility — rewrites the org's matrix (Admin:edit). Emits `org.pod_visibility_updated` + audit row in the same tx.

Request body

PutPodVisibilityRequest

Responses

Security: bearer

PUT /api/settings/ai/byok — seals and stores an API key at rest (Admin:edit + owner/admin standing). Rides the instant-first write path; replays are byte-identical and the trail stores presence flags only.

Request body

PutByokSecretRequest

Responses

Security: bearer

DELETE /api/settings/ai/byok/{provider} — removes a sealed BYOK key through the same gated path; the write trail keeps the presence snapshot.

Parameters

Responses

Security: bearer

PUT /settings/ai/caps — upsert org-wide or per-user soft/hard caps (audited).

Request body

PutAiCapRequest

Responses

Security: bearer

DELETE /settings/ai/caps/{cap_id}.

Parameters

Responses

Security: bearer

PUT /settings/ai/catalog — upsert one curated (provider, model) pair.

Request body

PutAiCatalogRequest

Responses

Security: bearer

DELETE /settings/ai/catalog/{entry_id}.

Parameters

Responses

Security: bearer

GET /settings/ai/credentials — the org's credential summaries (admin).

Responses

Security: bearer

PUT /settings/ai/credentials — seal an ORG credential (admin).

Request body

PutAiCredentialRequest

Responses

Security: bearer

DELETE /settings/ai/credentials/{credential_id} — revoke an ORG credential.

Parameters

Responses

Security: bearer

settings_ai_decision_overview

Responses

Security: bearer

settings_ai_decision_features_put

Request body

PutDecisionFeaturesRequest

Responses

Security: bearer

settings_ai_decision_config_put

Parameters

Request body

PutDecisionConfigRequest

Responses

Security: bearer

settings_ai_decision_preview

Parameters

Request body

DecisionPreviewRequest

Responses

Security: bearer

GET /api/settings/ai/decision/{surface_key}/runs — the shadow run log.

Parameters

Responses

Security: bearer

PUT /settings/ai/grants — upsert one per-surface grant (audited).

Request body

PutAiGrantRequest

Responses

Security: bearer

DELETE /settings/ai/grants/{grant_id} — revoke one grant (audited).

Parameters

Responses

Security: bearer

GET /settings/ai/matrix — the full admin view.

Responses

Security: bearer

PUT /settings/ai/model-picks/{surface_key} — the ORG default pick (owner/admin standing; stored as user_id NULL so every member's resolution falls back onto it when no personal pick holds).

Parameters

Request body

PutAiPickRequest

Responses

Security: bearer

Org-scoped plugin surfaces registered by THIS org (kind = 'plugin'), for the admin plugin-surface management view. Globally seeded native/internal keys are administrable through the matrix, not here.

Responses

Security: bearer

PUT /settings/ai/plugin-surfaces — register (or update) one org-scoped plugin surface (audited, instant-first write path). The registered key is deny-by-default until the grant flow covers it.

Request body

PutAiPluginSurfaceRequest

Responses

Security: bearer

POST /settings/ai/plugin-surfaces/{surface_id}/disable.

Parameters

Responses

Security: bearer

POST /settings/ai/plugin-surfaces/{surface_id}/enable.

Parameters

Responses

Security: bearer

GET /api/settings/ai/status — overview of AI completion provider & configured keys.

Responses

Security: bearer

POST /api/settings/ai/test — test-connection probe (Admin:edit gated). None mode returns the typed unavailable outcome; a configured provider verifies its sealed key still decrypts (tamper/rotation check). No vendor HTTP call happens in v1 — the live probe rides the edge adapters when a lane wires them.

Request body

TestConnectionRequest

Responses

Security: bearer

GET /settings/ai/usage/org — org progress roll-up (admin).

Responses

Security: bearer

GET /api/settings/org — effective org settings (defaults overlaid by stored overrides). Visible to every member.

Responses

Security: bearer

PUT /api/settings/org — upserts one org-scope override after registry validation (Admin:edit required). Emits `setting.updated` + audit row.

Request body

UpdateSettingRequest

Responses

Security: bearer

GET /api/settings/registry — every declared setting with kind, default, scope and validation shape. Any authenticated member may read it.

Responses

Security: bearer

GET /api/v1/settings/self-host — the self-hoster visibility payload.

Responses

Security: bearer

GET /api/settings/user — the caller's effective personal settings.

Responses

Security: bearer

PUT /api/settings/user — upserts one of the CALLER's own user-scope overrides. No role requirement: everyone may tune their own preferences.

Request body

UpdateSettingRequest

Responses

Security: bearer

GET /api/settings/user/email-envelope — the caller's resolved envelope, for the signature editor's live preview and the composer's prefill.

Responses

Security: bearer