Astronaut API — introduction

Only interfaces present in the current published OpenAPI schema under /api/v1/ are supported. Dashboard URLs are not a public API.

Contract first

Take endpoints, methods, fields, permissions and limits from OpenAPI; never invent an undocumented endpoint.

Authentication

Use HTTPS and a least-privilege scoped token. Never put it in a URL, browser bundle or Git.

Safe writes

Use an idempotency key when required, retain the correlation ID and re-read final state after a timeout.

Errors

Handle the status codes and response shape defined by the schema; keep sensitive detail in correlated server logs.