api-routes
July 28, 2026 ยท View on GitHub
Generated by labby docs generate. Do not edit by hand.
| Method | Path | Auth | Session | CSRF | Host Validation | Master | Group | Notes |
|---|---|---|---|---|---|---|---|---|
| GET | /.well-known/oauth-authorization-server | false | false | false | false | false | oauth | oauth metadata |
| GET | /.well-known/oauth-client | false | false | false | false | false | upstream_oauth | upstream OAuth client metadata |
| GET | /.well-known/oauth-protected-resource | false | false | false | false | false | oauth | OAuth protected-resource metadata |
| GET | /apps | true | true | false | false | false | apps | operator app launcher |
| GET | /apps/assets/labby-app-host.js | false | false | false | false | false | apps | shared app host bridge asset |
| GET | /apps/server-logs | true | true | false | false | false | apps | server logs app page |
| GET | /auth/google/callback | false | false | false | false | false | oauth | Google OAuth callback |
| GET | /auth/login | true | true | false | false | false | oauth | browser login redirect |
| POST | /auth/logout | true | true | true | false | false | oauth | browser session logout |
| GET | /auth/session | true | true | false | false | false | oauth | browser session introspection |
| GET | /auth/upstream/callback | false | false | false | false | false | upstream_oauth | browser callback for upstream OAuth |
| GET | /authorize | false | false | false | false | false | oauth | OAuth authorization endpoint |
| GET | /callback/{machine_id} | false | false | false | false | false | oauth_relay | public OAuth callback relay |
| POST | /callback/{machine_id} | false | false | false | false | false | oauth_relay | public OAuth callback relay |
| GET | /callback/{machine_id}/{suffix} | false | false | false | false | false | oauth_relay | public OAuth callback relay suffix path |
| POST | /callback/{machine_id}/{suffix} | false | false | false | false | false | oauth_relay | public OAuth callback relay suffix path |
| GET | /dev/mockup | true | true | false | false | true | dev | development mockup |
| GET | /dev/mockup/{name} | true | true | false | false | true | dev | named development mockup |
| GET | /gateway/oauth/result | false | false | false | false | false | upstream_oauth | browser OAuth completion page |
| GET | /health | false | false | false | false | false | health | liveness probe |
| GET | /healthz | false | false | false | false | false | oauth_relay | public OAuth callback relay shallow health |
| GET | /jwks | false | false | false | false | false | oauth | OAuth JWKS |
| GET | /mcp | true | false | false | false | true | mcp | MCP streamable HTTP endpoint |
| POST | /mcp | true | false | false | false | true | mcp | MCP streamable HTTP endpoint |
| GET | /ready | false | false | false | false | false | health | readiness probe |
| POST | /register | false | false | false | false | false | oauth | OAuth dynamic client registration |
| POST | /token | false | false | false | false | false | oauth | OAuth token endpoint |
| GET | /v1/apps/manifest | true | true | false | false | true | apps | operator app manifest |
| GET | /v1/auth/allowed-emails | true | true | false | false | true | auth | list OAuth email allowlist |
| POST | /v1/auth/allowed-emails | true | true | true | false | true | auth | add OAuth email allowlist entry |
| DELETE | /v1/auth/allowed-emails/{email} | true | true | true | false | true | auth | remove OAuth email allowlist entry |
| GET | /v1/docs | true | true | false | false | true | openapi | Scalar OpenAPI documentation UI |
| POST | /v1/doctor | true | true | true | true | true | doctor | doctor action dispatch |
| POST | /v1/fs | true | true | true | false | true | services | service action dispatch |
| POST | /v1/gateway | true | true | true | false | true | gateway | gateway action dispatch |
| POST | /v1/gateway | true | true | true | false | true | services | service action dispatch |
| POST | /v1/gateway/oauth/cancel | true | true | true | false | true | upstream_oauth | cancel upstream OAuth flow |
| POST | /v1/gateway/oauth/start | true | true | true | false | true | upstream_oauth | start upstream OAuth flow |
| GET | /v1/gateway/oauth/status | true | true | false | false | true | upstream_oauth | upstream OAuth status |
| POST | /v1/oauth/relay/import | true | true | true | false | true | oauth_relay | import public OAuth callback relay registry |
| GET | /v1/oauth/relay/machines | true | true | false | false | true | oauth_relay | list public OAuth callback relay machines |
| POST | /v1/oauth/relay/machines | true | true | true | false | true | oauth_relay | register public OAuth callback relay machine |
| DELETE | /v1/oauth/relay/machines/{machine_id} | true | true | true | false | true | oauth_relay | remove public OAuth callback relay machine |
| GET | /v1/oauth/relay/machines/{machine_id} | true | true | false | false | true | oauth_relay | get public OAuth callback relay machine |
| PUT | /v1/oauth/relay/machines/{machine_id} | true | true | true | false | true | oauth_relay | update public OAuth callback relay machine |
| POST | /v1/oauth/relay/machines/{machine_id}/disable | true | true | true | false | true | oauth_relay | disable public OAuth callback relay machine |
| POST | /v1/oauth/relay/machines/{machine_id}/enable | true | true | true | false | true | oauth_relay | enable public OAuth callback relay machine |
| GET | /v1/openapi.json | true | true | false | false | true | openapi | OpenAPI JSON document |
| GET | /v1/server-logs/query | true | true | false | false | true | apps | server logs app data query |
| POST | /v1/server_logs | true | true | true | false | true | services | service action dispatch |
| POST | /v1/setup | true | true | true | true | true | setup | setup action dispatch |
| POST | /v1/snippets | true | true | true | false | true | services | service action dispatch |
| GET | /v1/{service}/actions | true | true | false | false | true | services | service action metadata |