API reference

⚠️ Inferred — conventions not yet code-verified

Auth route taxonomy is verified (see Authentication); general conventions (pagination, idempotency, error envelope) below are not yet line-verified and should be regenerated from OpenAPI.

The endpoint pages in this section are grouped by domain (Identity & access, Applications & federation, Platform). Each lists method + route + a file:line source so claims are checkable.

Verified now

• Auth mechanisms & route prefixes — Authentication (verified against middleware + endpoint groups).
• Permission scopes — the axowl.* catalog (Permission scopes, verified).

Auto-generate from OpenAPI (recommended next step)

Axowl.Auth emits an OpenAPI document via AddOpenApi() (Axowl.Auth/Program.cs:342) at /openapi/v1.json in Development. Feeding that into the docs (e.g. starlight-openapi) yields request/response field detail that stays in sync with code — preferable to hand-maintaining it here.