List of HTTP routes exposed by the arka-deck Fastify server, grouped by functional domain.
Source of truth: adapters/inbound/web/server/src/routes/.
- CORS: localhost + RFC1918 ranges in LAN mode
- CSP:
script-src 'self', connect-src localhost + LAN
- Rate limit: 900 writes/min (GET/loopback exemptions)
- Token:
X-Arka-Token header required in LAN mode
- HSTS: disabled (local HTTP, no TLS)
- Request ID: UUID per request, logged
| Method | Path | Description |
|---|
| GET | /api/health | Health check (status + version) |
| GET | /api/system/* | System metadata (boot, token) |
| GET | /api/i18n/:lang | UI translations |
| GET | /api/preferences | User preferences |
| PUT | /api/preferences | Update preferences |
| Method | Path | Description |
|---|
| GET | /api/workspaces | List |
| GET | /api/workspaces/:id | Detail |
| POST | /api/workspaces | Create |
| PUT | /api/workspaces/:id | Modify |
| DELETE | /api/workspaces/:id | Delete (refuses if non-empty) |
| GET | /api/workspaces/:id/projects | Projects of the workspace |
| GET | /api/projects | List all projects |
| GET | /api/projects/:id | Detail |
| GET | /api/projects/find-by-cwd?path=... | Auto-detect by marker |
| POST | /api/projects | Create (checks allowlist + workspace) |
| PUT | /api/projects/:id | Modify (path immutable) |
| DELETE | /api/projects/:id | Forget (204) |
| DELETE | /api/projects/:id?purge=true | Full purge |
| POST | /api/projects/:id/touch | Update lastUsedAt |
| Method | Path | Description |
|---|
| GET | /api/catalogue/profiles | List HYOS profiles |
| GET | /api/catalogue/profiles/:id | Profile detail |
| DELETE | /api/catalogue/cache | Clear catalogue cache |
| Method | Path | Description |
|---|
| POST | /api/chat/sessions | Start a session |
| POST | /api/chat/sessions/:id/send-message | Send a turn (SSE stream) |
| GET | /api/chat/sessions/:id/stream | SSE stream |
| GET | /api/chat/sessions | List project sessions |
| GET | /api/chat/sessions/:id | Session detail |
| Method | Path | Description |
|---|
| GET | /api/memory/:projectId | Project memory overview |
| POST | /api/memory/:projectId/entry | Capture an entry |
| GET | /api/memory/:projectId/entries | List entries |
| Method | Path | Description |
|---|
| GET | /api/arkadoc/:projectId | List documents |
| GET | /api/arkadoc/:projectId/:docId | Document detail |
| PATCH | /api/arkadoc/:projectId/:docId/status | Update status |
| GET | /api/arkadoc/:projectId/:docId/render | Markdown render |
| Method | Path | Description |
|---|
| GET | /api/agent-action-cards/:projectId | Cards for the project |
| POST | /api/agent-action-cards/:projectId/select | Select a card before a turn |
| GET | /api/cortex-actions/tree | Cortex tree (modes, blocs) |
| GET | /api/cortex-actions/search | Search |
| POST | /api/cortex-actions/select | Record selection |
| GET | /api/cortex-actions/favorites | Project favorites |
| POST | /api/cortex-actions/suggest | Launch suggestion worker |
| Method | Path | Description |
|---|
| GET | /api/squads/:projectId | List squads of the project |
| POST | /api/squads | Create a squad |
| POST | /api/squads/:id/materialize-leader | Recruit the Leader Pack |
| GET | /api/orchestration/:projectId/missions | List missions |
| POST | /api/orchestration/missions | Start mission |
| GET | /api/orchestration/missions/:id | Mission state |
| Method | Path | Description |
|---|
| GET | /api/mission-guardian/:projectId/state | Phases + gates state |
| POST | /api/mission-guardian/:projectId/decision | Record decision |
| GET | /api/mission-guardian/:projectId/evidence | Captured evidence |
| Method | Path | Description |
|---|
| GET | /api/governance-lite/:projectId/policy | Active policy |
| POST | /api/governance-lite/:projectId/policy | Save a policy |
| GET | /api/governance-lite/:projectId/followup | Followup |
| Method | Path | Description |
|---|
| GET | /api/providers/manifests | Static manifests (catalogue) |
| GET | /api/providers/instances | List configured instances |
| POST | /api/providers/instances | Create an instance |
| PUT | /api/providers/instances/:id | Modify |
| DELETE | /api/providers/instances/:id | Delete |
| POST | /api/providers/instances/:id/test | Test (check + live) |
| GET | /api/cortex-lite/projects/:id/state | Cortex Lite project state |
| POST | /api/cortex-lite/projects/:id/sync | Synchronize |
| Method | Path | Description |
|---|
| GET | /api/connectors/manifests | Available connectors |
| GET | /api/connectors/installations/:projectId | Project installations |
| POST | /api/connectors/installations | Enable a connector |
| DELETE | /api/connectors/installations/:id | Disable |
| POST | /api/connectors/oauth/start | Start OAuth flow |
| GET | /api/connectors/oauth/callback | OAuth callback |
| POST | /api/connectors/executions | Execute an action |
| GET | /api/connectors/audit-log/:projectId | Audit trail |
| Method | Path | Description |
|---|
| POST | /api/workers/:name/invoke | Invoke a worker (1-shot) |
| GET | /api/workers/:name/logs | Invocation logs |
| Method | Path | Description |
|---|
| GET | /api/fs/read?path=... | Read a file |
| POST | /api/fs/write | Write (allowlist) |
