Management API

The control plane exposes its management surface under /api/v1. The admin UI consumes the same API available to automation clients.

Resource families

Prefix	Responsibility
`/api/v1/bundles`	Bundle metadata and immutable revisions
`/api/v1/artifact-bundles:*`	Whole-workspace validation and revision creation
`/api/v1/environments`	Environments, deployments, status, target servers, and key-value maps
`/api/v1/apps`	Consumer applications, credentials, and subscriptions
`/api/v1/packages`	API products and access packages
`/api/v1/developers`	Developer identities
`/api/v1/companies`	Consumer organizations
`/api/v1/groups`	Group membership and visibility
`/api/v1/users` and `/roles`	Administrative users and RBAC
`/api/v1/certificates`	Trust and client-certificate material
`/api/v1/keys`	Signing and credential-injection references
`/api/v1/audit`	Cursor-paged management audit records
`/api/v1/environments/{env}/trace-sessions`	Bounded runtime trace sessions
`/api/v1/system`	Capabilities and policy-type catalog

Artifact lifecycle endpoints

POST /api/v1/artifact-bundles:validate
POST /api/v1/artifact-bundles/revisions
GET  /api/v1/bundles/{name}/revisions
GET  /api/v1/bundles/{name}/revisions/{revision}
POST /api/v1/environments/{env}/deployments
POST /api/v1/environments/{env}/deployments/{target}:rollback
GET  /api/v1/environments/{env}/status

Policy catalog

GET /api/v1/system/capabilities
GET /api/v1/system/policy-types
GET /api/v1/system/policy-types/schema

The authoring UI uses these endpoints for type discovery, completion, and validation.