More endpoints — API reference

Additional endpoints not grouped above.

alerts

GET /alerts

List Alerts

List the project’s alert rules (newest first).

POST /alerts

Create Alert

GET /alerts/catalogue

Alert Catalogue

The alertable measures + comparators + windows the rule-builder picker renders.

GET /alerts/{rule_id}

Get Alert

PATCH /alerts/{rule_id}

Update Alert

DELETE /alerts/{rule_id}

Delete Alert

GET /alerts/{rule_id}/events

Get Alert Events

POST /alerts/{rule_id}/test

Test Alert

Evaluate the rule NOW as a dry-run — resolve its metric over the window and report the value

• whether it would breach — WITHOUT recording an insight, firing a sink, or touching bookkeeping. The ‘Test’ button in the rule editor.

autonomy

GET /autonomy/decisions

List Decisions Route

The decision trail — every autonomous admission, refusal, suspension, resume and cancel.

POST /autonomy/resume

Resume Route

Resume a suspended project. 409 when it is not suspended — resuming what is already running would write a misleading resumed row into the decision trail.

GET /autonomy/settings

Get Settings Route

The project’s autonomy level, suspension state and auto-accept policy.

PATCH /autonomy/settings

Patch Settings Route

Set the autonomy level and/or the auto-accept policy.

GET /autonomy/status

Status Route

The SPA’s single call: level + suspension + policy + the live health and budget signals the sweep will act on, plus the platform ceilings and what has already happened today.

POST /autonomy/suspend

Suspend Route

The human kill switch: suspend autonomy for this project and cancel anything in flight.

badges

POST /badge/mint

Mint Badge

Mint a signed badge token + ready-to-paste markdown for the current project (+ optional judge).

GET /badge/{token}.svg

Badge Svg

PUBLIC eval-status badge. Verify the token, pin the tenant schema, render the SVG.

cost-optimization

GET /cost-optimization/frontier

Get Frontier

Which cheaper model could judge your traces without losing your trust.

GET /cost-optimization/judges

Get Judges

What each LLM judge cost you over the window, and what it would cost at other coverages.

GET /cost-optimization/moves

Get Moves

The ranked list of ways to cut LLM cost without losing quality — at most one per subject.

GET /cost-optimization/summary

Get Summary

What your agent and your LLM judges cost over a window, and what one trace costs.

custom-measures

GET /custom-measures

List Custom Measures

This tenant’s measures + the platform catalogue + the authoring limit.

POST /custom-measures

Create Custom Measure

Define a new measure. Admin (MANAGE_MEASURES) + custom_measures tier (Silver+).

GET /custom-measures/options

Custom Measure Options

The vocabulary an author can pick from — the shipped grammar plus what this project has really observed.

POST /custom-measures/preview

Preview Custom Measure

Resolve an UNSAVED definition over a bounded window — the “does this actually work?” button.

GET /custom-measures/references/{slug}

Custom Measure References

What currently reads this measure — shown BEFORE a destructive edit, not after.

PATCH /custom-measures/{slug}

Update Custom Measure

Edit a measure you own. Editing a built-in platform measure returns 409.

DELETE /custom-measures/{slug}

Delete Custom Measure

Delete a measure. Reports what still REFERENCES it rather than silently orphaning them.

docs

GET /docs-search

Docs Search

Search the shipped documentation. Returns ranked page snippets (may be empty).

fix-engine

GET /fix-engine/runs

List Fix Runs

List fix runs (project-scoped), optionally filtered by remediation / status.

POST /fix-engine/runs

Create Fix Run

Launch a Neens-orchestrated fix run for an accepted remediation.

GET /fix-engine/runs/{run_id}

Get Fix Run

Fix-run detail (incl. eval/regression report + verifying judges + PR link).

POST /fix-engine/runs/{run_id}/cancel

Cancel Fix Run

Cancel a fix run (terminal). A run already in a terminal state cannot be cancelled.

GET /fix-engine/vcs-installations

List Vcs Installations

List the project’s VCS installations. NEVER returns the decrypted credential.

POST /fix-engine/vcs-installations

Create Vcs Installation

Register a GitHub App / local-git installation the fix engine opens PRs against. The credential (GitHub App PEM / token) is Fernet-encrypted at rest and NEVER returned.

DELETE /fix-engine/vcs-installations/{inst_id}

Delete Vcs Installation

Delete a VCS installation.

POST /fix-engine/vcs-installations/{inst_id}/test

Test Vcs Installation

Bounded reachability/auth probe: for github_app mint an installation token; for local_git run git ls-remote. Honest {ok, detail}; never raises to a 500.

kpi-definitions

GET /kpi-definitions

Get Kpi Definitions

This project’s EFFECTIVE KPI definitions (declared values merged over platform defaults).

PUT /kpi-definitions

Put Kpi Definitions

Declare what this project’s KPIs mean. Admin-only (MANAGE_OUTCOMES).

GET /kpi-definitions/options

Kpi Options

The vocabulary an admin can actually pick from — the platform catalogue plus what this project has really observed.

kpis

GET /kpis

List Kpis

This project’s KPIs. status = live (default: draft + active) | active | draft | archived | all.

POST /kpis

Create Kpi

Promote a measure to a commitment.

GET /kpis/options

Kpi Options

The measures this project may promote, each annotated with what the project actually has.

POST /kpis/snapshot

Snapshot All Kpis

Materialize daily history for every ACTIVE KPI in the caller’s project scope.

GET /kpis/summary

Kpi Summary

Every ACTIVE KPI with its current value, in display order.

GET /kpis/{kpi_id}

Get Kpi

One KPI plus its current value over ?range=.

PATCH /kpis/{kpi_id}

Patch Kpi

Partially update a KPI.

POST /kpis/{kpi_id}/archive

Archive Kpi

Retire a commitment.

GET /kpis/{kpi_id}/calibration

Kpi Calibration

How well this KPI’s LLM classifier agrees with human ground truth.

GET /kpis/{kpi_id}/eroding-clusters

Kpi Eroding Clusters

The failure clusters eroding this KPI, worst first.

GET /kpis/{kpi_id}/history

Kpi History

This KPI’s materialized daily history, plus where the series BREAKS.

POST /kpis/{kpi_id}/snapshot

Snapshot Kpi

Materialize daily history for ONE KPI.

mcp

GET /mcp

Mcp Get

Server→client SSE stream is not offered (stateless server). Beating the SPA GET catch-all with an explicit 405 so a client’s optional GET probe gets a clean answer, not the app shell.

POST /mcp

Mcp Endpoint

MCP Streamable HTTP endpoint. Accepts a single JSON-RPC message or a batch array.

mcp-oauth

GET /.well-known/oauth-authorization-server

Oauth Authorization Server

RFC 8414 authorization-server metadata (fully wired).

GET /.well-known/oauth-protected-resource

Oauth Protected Resource

RFC 9728 protected-resource metadata (fully wired).

GET /.well-known/oauth-protected-resource/mcp

Oauth Protected Resource Mcp

RFC 9728 metadata under the resource path some clients probe (fully wired).

GET /auth/mcp/tokens

List My Mcp Tokens

List the caller’s OWN active nk_mcp_ tokens (bearer nk_sess_/nk_mcp_ auth).

DELETE /auth/mcp/tokens/{token_id}

Revoke My Mcp Token

Revoke one of the caller’s OWN nk_mcp_ tokens by id (bearer-authenticated).

GET /oauth/authorize

Oauth Authorize

OAuth 2.1 authorization endpoint (the browser entry point from Claude Code).

POST /oauth/authorize/decision

Oauth Authorize Decision

The SPA consent callback (bearer nk_sess_-authenticated).

POST /oauth/introspect

Oauth Introspect

RFC 7662 token introspection.

POST /oauth/register

Oauth Register

Full Dynamic Client Registration (RFC 7591) + RFC 7592 registration credential.

GET /oauth/register/{client_id}

Oauth Register Get

RFC 7592 client read — return the current registration (registration-token authed).

PUT /oauth/register/{client_id}

Oauth Register Put

RFC 7592 client update — apply whitelisted metadata (registration-token authed).

DELETE /oauth/register/{client_id}

Oauth Register Delete

RFC 7592 client delete — soft-disable the client (registration-token authed). 204.

POST /oauth/revoke

Oauth Revoke

RFC 7009 token revocation — user-scoped.

POST /oauth/token

Oauth Token

OAuth 2.1 token endpoint (grant_type=authorization_code).

model-prices

GET /model-prices

List Model Prices

The tenant’s price table — platform list prices plus this project’s own overrides.

POST /model-prices

Create Model Price

Create (or idempotently replace) a TENANT price override.

GET /model-prices/observed

Observed Models

The models this project ACTUALLY ran over the window, joined against the resolved table.

PATCH /model-prices/{price_id}

Update Model Price

Edit a TENANT price row. A platform row is immutable to the tenant → 409.

DELETE /model-prices/{price_id}

Delete Model Price

Delete a TENANT override — the model reverts to the platform list price, or to unpriced if the catalogue does not name it. A platform row is immutable to the tenant → 409.

model-sweeps

GET /model-sweeps

List Model Sweeps

List sweeps (project-scoped), newest first. Headers only — the per-arm detail is one read away and a list page must not fan out N reconciles.

POST /model-sweeps

Create Model Sweep Route

Create a sweep + its arms and enqueue the launch onto the DEDICATED pre-prod fleet.

POST /model-sweeps/preview

Preview Model Sweep

Pre-flight cost estimate — writes nothing, spends nothing.

GET /model-sweeps/{sweep_id}

Get Model Sweep

Sweep detail: header + arms + per-arm child runs, reconciled live.

GET /model-sweeps/{sweep_id}/arms/{arm_id}/regressions

Sweep Arm Regressions

Where this arm breaks: the golden prompts the BASELINE stably passed and this arm did not.

POST /model-sweeps/{sweep_id}/cancel

Cancel Model Sweep

Cancel a sweep + every non-terminal child pre-prod run it launched.

GET /model-sweeps/{sweep_id}/comparison

Sweep Comparison

The N-way comparison: per-arm quality + cost + regressions, the per-agent split, and ONE verdict — reconciled live so a running sweep is current.

GET /model-sweeps/{sweep_id}/frontier

Sweep Frontier

The agent-model cost–quality frontier for a sweep — per-arm cost (per case) vs stable-pass quality, with each arm classified (recommended / on_frontier / overpaying / quality_risk / unknown) and ONE recommended move.

other

GET /app-config

App Config

Front-end bootstrap: docs URL + release version. Public, non-tenant, cache-friendly.

GET /health

Health

Liveness: the process is up. Always 200, cheap, no I/O.

GET /ready

Ready

Readiness: probe the backends this role depends on. 200 if all ok, else 503.

outcome-inlets

GET /outcome-inlets

List Connectors

POST /outcome-inlets

Create Connector

PATCH /outcome-inlets/{inlet_id}

Update Connector

DELETE /outcome-inlets/{inlet_id}

Delete Connector

POST /outcome-inlets/{inlet_id}/sync

Sync Connector

Run this connector’s sync NOW (bounded), synchronously off the event loop. Never 500s on a connector error — returns {ok: false,...}.

POST /outcome-inlets/{inlet_id}/test

Test Connector

Bounded reachability/auth probe. Honest error string on failure; never raises to a 500.

outcomes

GET /outcomes

List Outcomes

POST /outcomes

Push Outcomes

Record one or many business outcomes.

GET /outcomes/coverage

Outcome Coverage

Match coverage — the honest denominator.

GET /outcomes/kinds

List Kinds

The platform outcome catalogue. An unknown kind is still accepted on push (forward compatibility with tenant-defined KPIs) — this is the curated set the UI offers.

POST /outcomes/reconcile

Reconcile Now

Re-attempt correlation for this project’s parked outcomes, right now.

GET /outcomes/settings

Get Settings Route

PUT /outcomes/settings

Put Settings Route

GET /outcomes/{outcome_id}

Get Outcome

GET /outcomes/{outcome_id}/revisions

Get Outcome Revisions

Every revision of the outcome’s series, oldest → newest.

prompt-optimization

GET /prompt-optimization/preview

Preview Optimization

Pre-flight: the resolved task set, the recovered baseline prompt, the graders, and an ESTIMATED rollout count — everything a user needs to judge the cost BEFORE spending a cent of their own LLM budget. Read-only; makes no LLM call and writes nothing.

GET /prompt-optimization/runs

List Optimization Runs

List optimization runs (project-scoped), newest first.

POST /prompt-optimization/runs

Create Optimization Run

Launch a GEPA-style offline prompt-optimization run.

GET /prompt-optimization/runs/{run_id}

Get Optimization Run

Run detail: the run + its candidate lineage + the Pareto frontier (recomputed over the recorded per-task train scores, so the UI’s badges are derived from the same pure function the loop used) + the outcome verdict + the markdown proof report.

POST /prompt-optimization/runs/{run_id}/cancel

Cancel Optimization Run

Cancel a queued/running run (terminal). The worker re-reads the status at the top of every iteration, so an in-flight run stops at the next boundary instead of spending the rest of the budget; every terminal write it makes is guarded AND status NOT IN ('cancelled').

GET /prompt-optimization/runs/{run_id}/candidates/{candidate_id}

Get Optimization Candidate

One candidate + its recorded rollouts (bounded), so a reviewer can read the actual replayed output and the judge’s reasoning behind every per-task score.

POST /prompt-optimization/runs/{run_id}/emit-remediation

Emit Remediation

Manually emit the winning candidate as a prompt_change remediation (the autoEmit=false path). 409 when the run already emitted one; 422 when it did not clear the held-out bar — a run that never beat baseline has nothing to propose, and that is a legitimate result, not an error.

redaction

POST /redaction/preview

Preview Redaction

Run the project’s policy (± a mode override) over a sample. NEVER persists the text.

GET /redaction/settings

Get Redaction Settings

The per-project policy row + the resolved effective modes (for the governance UI).

PUT /redaction/settings

Put Redaction Settings

Set the per-project policy. Admin-gated (MANAGE_RETENTION — the same privacy-admin persona that owns retention/erasure; deliberately no new authz action).

run-targets

GET /run-targets

List Run Targets

POST /run-targets

Create Run Target

GET /run-targets/{run_target_id}

Get Run Target

PATCH /run-targets/{run_target_id}

Patch Run Target

DELETE /run-targets/{run_target_id}

Delete Run Target

scenario-suites

GET /scenario-suites

List Suites

POST /scenario-suites

Create Suite

Create a scenario suite from a set of failure modes + kick off generation.

GET /scenario-suites/{suite_id}

Get Suite

DELETE /scenario-suites/{suite_id}

Delete Suite

Hard-delete a suite AND its owned synthetic dataset (items + versions). A launched pre-prod run already snapshotted its items, so it is unaffected.

POST /scenario-suites/{suite_id}/launch

Launch Suite

One-click: create a pre-prod eval run over this suite’s synthetic golden dataset.

POST /scenario-suites/{suite_id}/regenerate

Regenerate Suite

Re-run generation for a suite (e.g. after adding exemplars or configuring an LLM). Optional body may override per_mode/strategies/include_replay/connection_id.

GET /scenario-suites/{suite_id}/scenarios

List Scenarios

scorer-comparisons

GET /scorer-comparisons

List Scorer Comparisons

List comparisons (project-scoped), newest first — headers only.

POST /scorer-comparisons

Create Scorer Comparison Route

Create a scorer comparison and start scoring.

GET /scorer-comparisons/{comparison_id}

Get Scorer Comparison

Comparison detail: meta + status/progress + the per-scorer side-by-side aggregate.

POST /scorer-comparisons/{comparison_id}/cancel

Cancel Scorer Comparison

Cancel a comparison that is still in progress. Scoring stops shortly after; any results already computed are kept.

POST /scorer-comparisons/{comparison_id}/run

Run Scorer Comparison Route

(Re)run a comparison to fill in any missing scores. Already-computed results are kept; only traces that have not yet been scored by a given scorer are scored.

share-links

GET /share-links

List Share Links

POST /share-links

Create Share Link

GET /share-links/settings

Get Share Settings

Per-project toggle state + the global flag / TTL bounds (for the UI).

PUT /share-links/settings

Put Share Settings

Flip the per-project share toggle. Admin-gated: enabling PUBLIC (even redacted) sharing is a sensitive project-config / data-governance decision, so it reuses the admin DELETE_RESOURCE capability. (A dedicated MANAGE_SHARE_LINKS action is the clean follow-up — deferred to avoid editing the shared authz matrix concurrently.)

DELETE /share-links/{link_id}

Revoke Share Link

GET /share/{token}

Public Share View

Resolve a share token → pin the owning company’s schema → load + REDACT the incident.

spend-budgets

GET /spend-budgets

List Budgets Route

Every known feature’s budget for this project (unconfigured features read as unlimited).

GET /spend-budgets/{feature}

Get Budget Route

One feature’s budget.

PUT /spend-budgets/{feature}

Put Budget Route

Set a feature’s spend limit + period. limitUsd: null clears the limit.

GET /spend-budgets/{feature}/usage

Budget Usage Route

The current period’s spend against the limit, plus the ledger rows behind it.

trace-inlets

GET /trace-inlets

List Connectors

POST /trace-inlets

Create Connector

PATCH /trace-inlets/{inlet_id}

Update Connector

DELETE /trace-inlets/{inlet_id}

Delete Connector

POST /trace-inlets/{inlet_id}/sync

Sync Connector

Run this connector’s sync NOW (bounded), synchronously off the event loop. Never 500s on a connector error — returns {ok: false,...}.

POST /trace-inlets/{inlet_id}/test

Test Connector

Bounded reachability/auth probe. Honest error string on failure; never raises to a 500.

usage

GET /usage

Get Usage

Return the current tenant’s usage aggregates, grouped by group_by.

GET /usage/kpis

Get Usage Kpis

Headline KPI tiles for the tenant Usage page.

GET /usage/summary

Get Usage Summary

Totals per feature for the window + a daily timeseries for the headline features.

webhooks

POST /webhooks/github

Github Webhook

Handle a GitHub webhook delivery. ping ⇒ {ok:true}; a MERGED pull_request closed event ⇒ record a close-out watch on the owning remediation. Auth is the HMAC signature only.