@1claw/openapi-spec 0.59.6 → 0.59.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/openapi.json +21 -5
- package/openapi.yaml +50 -6
- package/package.json +1 -1
package/openapi.json
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
"openapi": "3.1.0",
|
|
3
3
|
"info": {
|
|
4
4
|
"title": "1Claw API",
|
|
5
|
-
"version": "0.
|
|
5
|
+
"version": "0.59.7",
|
|
6
6
|
"description": "Secure secret management for AI agents. Provides vaults, secrets,\npolicy-based access control, agent identity, Intents API,\nsharing, billing, and audit logging. Automations (workflow_spec,\nwebhook tokens, event triggers, Assist), cloud runtimes with\ninteractive shell sessions, agent memory, and discovery.\n\nAll endpoints require JWT Bearer authentication unless marked with\n`security: []`.\n",
|
|
7
7
|
"contact": {
|
|
8
8
|
"email": "ops@1claw.xyz"
|
|
@@ -1409,6 +1409,10 @@
|
|
|
1409
1409
|
},
|
|
1410
1410
|
"passkey_count": {
|
|
1411
1411
|
"type": "integer"
|
|
1412
|
+
},
|
|
1413
|
+
"passkey_requirements_downgraded": {
|
|
1414
|
+
"type": "boolean",
|
|
1415
|
+
"description": "True while this account carries a passkey requirement\nthat the 1claw.xyz → 1claw.co move cleared on its\nbehalf. The two flags above read false, but that was\nnot the user's choice: registering a passkey on the\ncanonical domain restores them.\n"
|
|
1412
1416
|
}
|
|
1413
1417
|
}
|
|
1414
1418
|
}
|
|
@@ -6246,7 +6250,7 @@
|
|
|
6246
6250
|
"Organization"
|
|
6247
6251
|
],
|
|
6248
6252
|
"summary": "Provision MCP onboarding bundle",
|
|
6249
|
-
"description": "Creates welcome vault + sample secret, MCP agent, and
|
|
6253
|
+
"description": "Creates welcome vault + sample secret, MCP agent, and a policy on the\nvault. Returns one-time API key and stdio MCP config.\n\nThe grant is `**` only when the welcome vault is newly created. If an\norg already has a vault named `default`, it is reused and the agent is\ngranted `examples/**` instead — enough to read the sample it is asked to\nverify with, without exposing secrets already kept there.\n\nSubject to `agent.create` control-plane consensus; see `approval_id`.\n",
|
|
6250
6254
|
"operationId": "provisionOnboarding",
|
|
6251
6255
|
"requestBody": {
|
|
6252
6256
|
"required": false,
|
|
@@ -13721,7 +13725,7 @@
|
|
|
13721
13725
|
"Authentication"
|
|
13722
13726
|
],
|
|
13723
13727
|
"summary": "Verify email OTP and get JWT",
|
|
13724
|
-
"description": "Verifies the 6-digit code sent to the user's email.
|
|
13728
|
+
"description": "Verifies the 6-digit code sent to the user's email. Optionally\nauto-provisions treasury wallets for the specified chains. Returns a JWT\nfor subsequent API calls.\n\nAn unrecognized address is rejected unless the request carries\n`platform_app_id` or sets `allow_signup`.\n",
|
|
13725
13729
|
"operationId": "verifyEmailOtp",
|
|
13726
13730
|
"security": [],
|
|
13727
13731
|
"requestBody": {
|
|
@@ -13753,6 +13757,11 @@
|
|
|
13753
13757
|
"type": "string"
|
|
13754
13758
|
},
|
|
13755
13759
|
"description": "Chains to auto-generate wallets for (e.g. [\"ethereum\", \"base\"])"
|
|
13760
|
+
},
|
|
13761
|
+
"allow_signup": {
|
|
13762
|
+
"type": "boolean",
|
|
13763
|
+
"default": false,
|
|
13764
|
+
"description": "Opt in to creating an account when the address is not\nrecognized. Without it an unknown address is rejected\nrather than silently given a new user and org — a valid\ncode proves control of an inbox, not consent to sign up.\nNot required when `platform_app_id` is present: creating\nthe end user on first login is the embedded-wallet flow.\n"
|
|
13756
13765
|
}
|
|
13757
13766
|
}
|
|
13758
13767
|
}
|
|
@@ -23507,8 +23516,10 @@
|
|
|
23507
23516
|
"solana",
|
|
23508
23517
|
"xrp",
|
|
23509
23518
|
"cardano",
|
|
23510
|
-
"tron"
|
|
23511
|
-
|
|
23519
|
+
"tron",
|
|
23520
|
+
"midnight"
|
|
23521
|
+
],
|
|
23522
|
+
"description": "`midnight` is Preprod-only and requires the midnight-signer\nsidecar. Note it can be provisioned but not rotated or\nimported: derivation happens in the sidecar, so there is no\nlocal keygen and no raw private key to import. Both of\nthose endpoints refuse it before consuming an approval.\n"
|
|
23512
23523
|
}
|
|
23513
23524
|
}
|
|
23514
23525
|
},
|
|
@@ -24662,6 +24673,11 @@
|
|
|
24662
24673
|
},
|
|
24663
24674
|
"client": {
|
|
24664
24675
|
"type": "string"
|
|
24676
|
+
},
|
|
24677
|
+
"approval_id": {
|
|
24678
|
+
"type": "string",
|
|
24679
|
+
"format": "uuid",
|
|
24680
|
+
"description": "Approval satisfying an `agent.create` control-plane consensus policy,\nif the org has one. Same field and meaning as on `POST /v1/agents`:\nthe first call returns 202 with the approval to collect, and the\nretry passes its id here.\n"
|
|
24665
24681
|
}
|
|
24666
24682
|
}
|
|
24667
24683
|
},
|
package/openapi.yaml
CHANGED
|
@@ -2,7 +2,7 @@ openapi: 3.1.0
|
|
|
2
2
|
|
|
3
3
|
info:
|
|
4
4
|
title: 1Claw API
|
|
5
|
-
version: 0.
|
|
5
|
+
version: "0.59.7"
|
|
6
6
|
description: |
|
|
7
7
|
Secure secret management for AI agents. Provides vaults, secrets,
|
|
8
8
|
policy-based access control, agent identity, Intents API,
|
|
@@ -936,6 +936,14 @@ paths:
|
|
|
936
936
|
type: boolean
|
|
937
937
|
passkey_count:
|
|
938
938
|
type: integer
|
|
939
|
+
passkey_requirements_downgraded:
|
|
940
|
+
type: boolean
|
|
941
|
+
description: |
|
|
942
|
+
True while this account carries a passkey requirement
|
|
943
|
+
that the 1claw.xyz → 1claw.co move cleared on its
|
|
944
|
+
behalf. The two flags above read false, but that was
|
|
945
|
+
not the user's choice: registering a passkey on the
|
|
946
|
+
canonical domain restores them.
|
|
939
947
|
patch:
|
|
940
948
|
tags: [Authentication]
|
|
941
949
|
summary: Update user security settings
|
|
@@ -4036,7 +4044,16 @@ paths:
|
|
|
4036
4044
|
post:
|
|
4037
4045
|
tags: [Organization]
|
|
4038
4046
|
summary: Provision MCP onboarding bundle
|
|
4039
|
-
description:
|
|
4047
|
+
description: |
|
|
4048
|
+
Creates welcome vault + sample secret, MCP agent, and a policy on the
|
|
4049
|
+
vault. Returns one-time API key and stdio MCP config.
|
|
4050
|
+
|
|
4051
|
+
The grant is `**` only when the welcome vault is newly created. If an
|
|
4052
|
+
org already has a vault named `default`, it is reused and the agent is
|
|
4053
|
+
granted `examples/**` instead — enough to read the sample it is asked to
|
|
4054
|
+
verify with, without exposing secrets already kept there.
|
|
4055
|
+
|
|
4056
|
+
Subject to `agent.create` control-plane consensus; see `approval_id`.
|
|
4040
4057
|
operationId: provisionOnboarding
|
|
4041
4058
|
requestBody:
|
|
4042
4059
|
required: false
|
|
@@ -8767,9 +8784,12 @@ paths:
|
|
|
8767
8784
|
tags: [Authentication]
|
|
8768
8785
|
summary: Verify email OTP and get JWT
|
|
8769
8786
|
description: |
|
|
8770
|
-
Verifies the 6-digit code sent to the user's email.
|
|
8771
|
-
|
|
8772
|
-
for
|
|
8787
|
+
Verifies the 6-digit code sent to the user's email. Optionally
|
|
8788
|
+
auto-provisions treasury wallets for the specified chains. Returns a JWT
|
|
8789
|
+
for subsequent API calls.
|
|
8790
|
+
|
|
8791
|
+
An unrecognized address is rejected unless the request carries
|
|
8792
|
+
`platform_app_id` or sets `allow_signup`.
|
|
8773
8793
|
operationId: verifyEmailOtp
|
|
8774
8794
|
security: []
|
|
8775
8795
|
requestBody:
|
|
@@ -8793,6 +8813,16 @@ paths:
|
|
|
8793
8813
|
type: array
|
|
8794
8814
|
items: { type: string }
|
|
8795
8815
|
description: Chains to auto-generate wallets for (e.g. ["ethereum", "base"])
|
|
8816
|
+
allow_signup:
|
|
8817
|
+
type: boolean
|
|
8818
|
+
default: false
|
|
8819
|
+
description: |
|
|
8820
|
+
Opt in to creating an account when the address is not
|
|
8821
|
+
recognized. Without it an unknown address is rejected
|
|
8822
|
+
rather than silently given a new user and org — a valid
|
|
8823
|
+
code proves control of an inbox, not consent to sign up.
|
|
8824
|
+
Not required when `platform_app_id` is present: creating
|
|
8825
|
+
the end user on first login is the embedded-wallet flow.
|
|
8796
8826
|
responses:
|
|
8797
8827
|
"200":
|
|
8798
8828
|
description: Existing user authenticated
|
|
@@ -15288,7 +15318,13 @@ components:
|
|
|
15288
15318
|
properties:
|
|
15289
15319
|
chain:
|
|
15290
15320
|
type: string
|
|
15291
|
-
enum: [ethereum, bitcoin, solana, xrp, cardano, tron]
|
|
15321
|
+
enum: [ethereum, bitcoin, solana, xrp, cardano, tron, midnight]
|
|
15322
|
+
description: |
|
|
15323
|
+
`midnight` is Preprod-only and requires the midnight-signer
|
|
15324
|
+
sidecar. Note it can be provisioned but not rotated or
|
|
15325
|
+
imported: derivation happens in the sidecar, so there is no
|
|
15326
|
+
local keygen and no raw private key to import. Both of
|
|
15327
|
+
those endpoints refuse it before consuming an approval.
|
|
15292
15328
|
|
|
15293
15329
|
SigningKeyResponse:
|
|
15294
15330
|
type: object
|
|
@@ -16124,6 +16160,14 @@ components:
|
|
|
16124
16160
|
type: string
|
|
16125
16161
|
client:
|
|
16126
16162
|
type: string
|
|
16163
|
+
approval_id:
|
|
16164
|
+
type: string
|
|
16165
|
+
format: uuid
|
|
16166
|
+
description: |
|
|
16167
|
+
Approval satisfying an `agent.create` control-plane consensus policy,
|
|
16168
|
+
if the org has one. Same field and meaning as on `POST /v1/agents`:
|
|
16169
|
+
the first call returns 202 with the approval to collect, and the
|
|
16170
|
+
retry passes its id here.
|
|
16127
16171
|
|
|
16128
16172
|
OnboardingProvisionResponse:
|
|
16129
16173
|
type: object
|