BrainstormRouter System API

The system API from BrainstormRouter — 243 operation(s) for system.

Operations 316

Showing the first 250 of 316. The full set is in the contract, and via get_provider_operations.

GET /health Liveness probe — returns ok while the process is up and serving HTTP #
GET /metrics Prometheus-compatible metrics endpoint (text exposition format) #
GET /v1/account Get tenant profile with user count #
PATCH /v1/account Update tenant profile (currently: name) #
POST /v1/account/graduate Graduate a sandbox tenant to standard tier via a verified provider key (BYOK) #
GET /v1/account/graduation Graduation criteria + live progress for a sandbox tenant (machine-readable) #
GET /v1/account/users List users in the current tenant (RLS-scoped) #
POST /v1/account/users/invite Invite a user by email; returns claim URL (201) #
DELETE /v1/account/users/{id} Remove a user from the current tenant #
POST /v1/account/verify-email Send a verification code to upgrade a sandbox tenant to standard tier #
POST /v1/account/verify-email/confirm Confirm the code — promote sandbox tenant to standard tier ($5/day) #
GET /v1/agent-limits Read the per-agent limits map for the current tenant #
PATCH /v1/agent-limits Merge updates into the per-agent limits map (null value deletes an entry) #
PUT /v1/agent-limits Replace the entire per-agent limits map (canonicalizes keys to `agent:`) #
GET /v1/agent/task-runs Query task-run history (filter by project, limit) #
POST /v1/agent/task-runs Report a completed task run (Brainstorm CLI integration; 201) #
POST /v1/agents/{agentId}/run Start the agent loop for a session and stream events as SSE #
GET /v1/agents/{agentId}/runs Run history for an agent (sessions with aggregate metadata) #
POST /v1/agents/{agentId}/sessions Create an idle session for the agent (no loop) #
DELETE /v1/agents/{agentId}/sessions/{sessionId} Terminate a session (status → ended) #
GET /v1/agents/{agentId}/sessions/{sessionId} Get a session by id #
POST /v1/agents/{agentId}/sessions/{sessionId}/events Publish a user event to a running session (PG NOTIFY) #
GET /v1/aliases Read the model alias map for the current tenant #
PATCH /v1/aliases Merge alias updates (null value deletes a key) #
PUT /v1/aliases Replace the entire model alias map (rejects null values; use PATCH to delete) #
GET /v1/api-keys List API keys (no plaintext, preview only) #
POST /v1/api-keys Create a new API key (plaintext returned once) #
DELETE /v1/api-keys/{id} Revoke an API key (soft-delete; cache invalidated immediately) #
PATCH /v1/api-keys/{id} Update an API key's scopes, limits, or metadata (self-service) #
GET /v1/approvals/pending List pending approval requests for the tenant #
POST /v1/approvals/queue Submit a deferred action for human review #
POST /v1/approvals/{id}/approve Approve a pending request and execute its deferred action #
POST /v1/approvals/{id}/reject Reject a pending request without executing its action #
POST /v1/auth/device/authorize Start a device-authorization flow (admin scope required) #
POST /v1/auth/device/token Poll device-authorization status #
GET /v1/billing/plan Current tenant plan + usage vs limits #
PUT /v1/billing/plan Switch the tenant's billing plan (platform operator only; tenants get 403… #
GET /v1/billing/plans List available billing plans #
GET /v1/budget Alias of /v1/budget/status served at the bare /v1/budget path #
GET /v1/budget/agents List per-agent budget configurations and current status #
PUT /v1/budget/agents/{agentId} Set budget configuration for a specific agent #
GET /v1/budget/alerts/config Get current budget alert configuration #
PUT /v1/budget/alerts/config Update budget alert configuration (thresholds, webhook, enabled) #
GET /v1/budget/alerts/history Recent budget alert events for the tenant #
GET /v1/budget/forecast Spend forecast, projected depletion date, anomaly detection #
PUT /v1/budget/limits Update tenant-level daily and monthly budget limits #
GET /v1/budget/status Current tenant + key spend against daily/monthly limits #
GET /v1/capabilities Machine-queryable, trust-scored graph of BR's own capabilities — query, don't… #
GET /v1/capacity/forecast Predict rate-limit exhaustion + budget burn per provider (DB-backed forecast) #
GET /v1/capacity/providers Per-provider capacity status (24h) — request count, success rate, latency… #
GET /v1/catalog/runnable Filtered list of models routable right now (circuit-closed + sentinel-healthy +… #
GET /v1/catalog/status Curated-catalog status: total endpoints, models, per-provider counts #
GET /v1/config List all config sections (RBAC-filtered, sensitive fields redacted for… #
POST /v1/config/import Import configuration sections from the on-disk file (admin only) #
GET /v1/config/otel OpenTelemetry exporter configuration: endpoint, service name, batching #
DELETE /v1/config/{key} Delete a config section (reset to defaults) #
GET /v1/config/{key} Read a single config section (sensitive fields redacted for non-admins) #
PATCH /v1/config/{key} Merge-patch a config section (RFC 7396) with optional OCC #
PUT /v1/config/{key} Replace a config section (full PUT) with OCC via If-Match header #
GET /v1/config/{key}/audit Audit trail (recent change events) for a config section #
GET /v1/connectors List active external connectors #
POST /v1/connectors Register an external connector with KMS-encrypted credentials #
DELETE /v1/connectors/{id} Soft-delete a connector (status=disabled, kept for audit) #
GET /v1/connectors/{id} Get a connector by id (credential envelope NEVER returned) #
PUT /v1/connectors/{id} Update a connector (re-encrypts credential if supplied) #
POST /v1/connectors/{id}/test Probe connector connectivity (HEAD baseUrl with decrypted auth) #
GET /v1/discovery Self-describing capability discovery — routing, models, budget, headers, errors #
GET /v1/eval/datasets List evaluation datasets for the tenant #
POST /v1/eval/datasets Create an evaluation dataset #
DELETE /v1/eval/datasets/{id} Delete an evaluation dataset and all its items #
GET /v1/eval/datasets/{id} Get an evaluation dataset #
PUT /v1/eval/datasets/{id} Update an evaluation dataset (name, description) #
GET /v1/eval/datasets/{id}/export Export dataset items (JSON default, CSV via ?format=csv) #
POST /v1/eval/datasets/{id}/import-from-logs Import items from production completion audit logs #
GET /v1/eval/datasets/{id}/items List items in an evaluation dataset #
POST /v1/eval/datasets/{id}/items Append items to an evaluation dataset (batch) #
DELETE /v1/eval/datasets/{id}/items/{itemId} Delete a single dataset item #
POST /v1/forensics/export HMAC-signed forensic export bundle (usage + security events) #
GET /v1/forensics/session/{sessionId}/timeline Reconstruct chronological timeline of events for a session #
POST /v1/god-mode/execute Execute a Platform Contract tool by name (ChangeSet for mutations) #
GET /v1/god-mode/tools Discover Brainstorm Platform Contract tools available on BR #
GET /v1/governance/agent-manifests List agent manifests (CAF Phase 2 semantic RBAC) #
DELETE /v1/governance/agent-manifests/{agentId} Delete an agent manifest #
GET /v1/governance/agent-manifests/{agentId} Get an agent manifest by agent id #
PUT /v1/governance/agent-manifests/{agentId} Create or replace an agent manifest #
GET /v1/governance/agents/inventory Agent inventory — every caller seen in the window classified as registered /… #
GET /v1/governance/anomaly/history Anomaly history (last N events) #
GET /v1/governance/anomaly/scores Recent anomaly-detected security events #
GET /v1/governance/artifacts/{request_id} Signed Governance Artifact for one request — control-mapped, verifiable evidence #
GET /v1/governance/audit/chain/verify Verify the hash-chain integrity of the completion audit trail #
POST /v1/governance/audit/verify Verify server-held evidence for one request — per-check signature / registry /… #
GET /v1/governance/behavioral-profiles List behavioral profiles (CAF Phase 2) #
DELETE /v1/governance/behavioral-profiles/{role} Delete a behavioral profile by role #
PUT /v1/governance/behavioral-profiles/{role} Create or replace a behavioral profile for a role #
GET /v1/governance/completion-audit Completion audit trail (per-request identity + outcome) #
GET /v1/governance/compliance/autopilot Regulatory compliance autopilot (frameworks + score) #
GET /v1/governance/compliance/coverage Evidence coverage — fraction of recorded decisions bound to the audit chain #
GET /v1/governance/compliance/eu-ai-act Generate an EU AI Act compliance report #
POST /v1/governance/credentials/issue Issue a verifiable agent credential (VAC) #
POST /v1/governance/credentials/verify Verify a credential signature and compute trust level #
GET /v1/governance/data-policy The tenant's effective data-protection posture — retention, no-training… #
POST /v1/governance/knowledge/snapshot Create a knowledge-escrow snapshot for an agent #
GET /v1/governance/lineage Decision lineage — durable trace reconstruction (or ?live=true ring buffer) #
GET /v1/governance/lineage/{request_id} The WHY answer for one request — verified audit block + policy_context + lineage #
GET /v1/governance/memory/audit Memory change history (append/replace/delete/pin/evict) #
GET /v1/governance/memory/compliance Scan core memory for PII/policy violations #
GET /v1/governance/memory/reconstruct Reconstruct memory state at a past timestamp (with optional diff) #
GET /v1/governance/memory/stats Memory audit stats (operation counts by type) #
POST /v1/governance/policy/dry-run Evaluate a PolicyContext against the tenant ruleset (no enforcement) #
GET /v1/governance/sleep-time/report Sleep-time refinement history #
POST /v1/governance/sovereignty/policy Create a clean-room sovereignty policy between two orgs #
POST /v1/governance/sovereignty/purge Issue a provable purge of memory entries for an org #
GET /v1/governance/summary Executive dashboard summary (memory health + activity) #
GET /v1/group-mappings List IdP group → RBAC role mappings for the tenant #
DELETE /v1/group-mappings/{id} Delete an IdP group → role mapping #
GET /v1/group-mappings/{id} Get a single group → role mapping by ID #
PATCH /v1/group-mappings/{id} Update an IdP group mapping's role, scopes, or display name #
GET /v1/guardrails/catalog List checks in the V2 guardrail registry #
GET /v1/guardrails/catalog/{checkId} Get a single check definition #
GET /v1/guardrails/config Get the tenant guardrail pipeline config #
PUT /v1/guardrails/config Update the tenant guardrail pipeline config #
POST /v1/guardrails/feedback Submit false-positive / true-positive feedback for a guardrail scan #
GET /v1/guardrails/metrics Aggregated scan + feedback metrics (security_events or in-memory) #
GET /v1/guardrails/pipelines List tenant V2 guardrail pipelines #
POST /v1/guardrails/pipelines Create a V2 guardrail pipeline #
DELETE /v1/guardrails/pipelines/{id} Delete a V2 guardrail pipeline #
GET /v1/guardrails/pipelines/{id} Get a V2 guardrail pipeline by id #
PUT /v1/guardrails/pipelines/{id} Update a V2 guardrail pipeline #
POST /v1/guardrails/pipelines/{id}/test Test a V2 guardrail pipeline against sample text #
GET /v1/guardrails/providers List built-in + external guardrail providers #
POST /v1/guardrails/providers Register an external guardrail provider #
DELETE /v1/guardrails/providers/{id} Remove an external guardrail provider #
GET /v1/guardrails/templates List well-known provider templates #
POST /v1/guardrails/test Run text through the guardrail pipeline (testing/preview) #
GET /v1/health/providers Per-provider health combining sentinel probes, circuit breakers, and BYOK key… #
GET /v1/insights/daily Daily cost-optimization insight rollup (requires DB) #
GET /v1/insights/forecast Budget runway forecast (daily or monthly period) #
GET /v1/insights/optimize Model-substitution recommendations for cost reduction #
GET /v1/insights/waste Waste detection report. Returns 403 privacy_restricted on strict privacy mode #
GET /v1/intelligence/institutional Institutional intelligence (I3) index for the tenant #
GET /v1/intelligence/sampling-audit Routing-sampling audit (agent trap defense) #
GET /v1/mcp/approvals List pending MCP tool-call approvals #
POST /v1/mcp/approvals/{id}/approve Approve a queued MCP tool call #
POST /v1/mcp/approvals/{id}/deny Deny a queued MCP tool call #
GET /v1/mcp/audit Recent MCP tool-call audit entries for the tenant #
GET /v1/mcp/bootstrap MCP bootstrap discovery (2-tool manifest, no auth) #
POST /v1/mcp/bootstrap Pre-auth MCP bootstrap — register a tenant in-band over MCP (2 tools) #
GET /v1/mcp/capabilities Core + external MCP tool catalog for the tenant #
GET /v1/mcp/connect MCP server discovery (capability + tool manifest) #
POST /v1/mcp/connect Open an MCP Streamable HTTP session against BR's control-plane tools #
GET /v1/mcp/governance Get MCP governance engine status #
PUT /v1/mcp/governance/policy Update an MCP tool-name policy in the governance engine #
GET /v1/mcp/servers List registered MCP servers for this tenant #
POST /v1/mcp/servers Register an external MCP server for this tenant #
DELETE /v1/mcp/servers/{id} Remove an MCP server registration #
GET /v1/mcp/servers/{id} Get details for an MCP server #
PUT /v1/mcp/servers/{id} Update an MCP server registration #
POST /v1/mcp/servers/{id}/discover Trigger remote tool discovery for an MCP server #
GET /v1/mcp/servers/{id}/health Get the last health status for an MCP server #
POST /v1/mcp/servers/{id}/health Trigger an on-demand health check for an MCP server #
GET /v1/mcp/tools List all discovered tools across registered MCP servers #
POST /v1/mcp/tools/{server}/{tool} Execute a tool call through the MCP gateway (proxied + governed) #
GET /v1/memory/approval-config Get the memory-write approval-required flag #
PUT /v1/memory/approval-config Set the memory-write approval-required flag #
GET /v1/memory/blocks List memory blocks with entry counts (optional ?project= filter) #
POST /v1/memory/blocks/sync Bulk upsert core memory entries for a project (Brainstorm CLI) #
GET /v1/memory/blocks/{block} List entries in a specific memory block #
GET /v1/memory/entries List all core memory entries (optional ?project= filter) #
POST /v1/memory/entries Append a new core memory entry (alias for /v1/memory/store) #
DELETE /v1/memory/entries/{id} Delete a memory entry #
PUT /v1/memory/entries/{id} Update fact text and/or pin state for an entry #
POST /v1/memory/init Bootstrap memory from context documents via LLM extraction #
GET /v1/memory/pending List pending memory writes (unified queue + legacy) #
POST /v1/memory/pending/{id}/approve Approve a pending memory write (unified queue or legacy) #
POST /v1/memory/pending/{id}/reject Reject a pending memory write #
POST /v1/memory/query Relevance-scored memory query (top-N matches) #
GET /v1/memory/shared/entries List shared memory entries plus pending approval count #
POST /v1/memory/shared/store Store a tenant-wide shared memory entry (may queue for approval) #
POST /v1/memory/store Append a core memory entry (canonical path) #
GET /v1/mesh/agents List registered agents in the mesh for this tenant #
POST /v1/mesh/check Evaluate a mesh access decision for source → destination #
POST /v1/mesh/deregister Deregister an agent from the mesh (mTLS required) #
POST /v1/mesh/execute Run a DAG-based mesh workflow, streaming step progress as SSE #
GET /v1/mesh/forensics List forensic snapshots for the tenant #
GET /v1/mesh/forensics/{id} Get a single forensic snapshot by id #
GET /v1/mesh/graph Current mesh graph snapshot for this tenant #
GET /v1/mesh/graph/history Historical mesh graph snapshots over the last N hours #
POST /v1/mesh/heartbeat Send a liveness heartbeat for the calling agent (mTLS required) #
POST /v1/mesh/invoke-did/{target_did} Resolve a target DID via the Capability Registry and forward the invocation to… #
POST /v1/mesh/invoke/{hostname} Proxy an A2A call through the mesh (mTLS required) #
GET /v1/mesh/policies List mesh RBAC policies #
POST /v1/mesh/policies Create a mesh allow/deny policy #
DELETE /v1/mesh/policies/{id} Delete a mesh policy by id #
GET /v1/mesh/profiles List mesh behavioral profiles #
POST /v1/mesh/profiles Create a mesh behavioral profile #
DELETE /v1/mesh/profiles/{role} Delete a mesh behavioral profile by role #
POST /v1/mesh/register Register an agent in the service mesh (mTLS required) #
GET /v1/mesh/resolve/{hostname} Resolve a mesh hostname to its agent registration #
GET /v1/models List available models for the authenticated tenant (auto-detects OpenAI vs… #
GET /v1/models/leaderboard Per-model performance rankings across reward, quality, speed, value, reliability #
GET /v1/models/{provider}/{modelId}/capabilities Per-model capability profile: catalog flags + production… #
GET /v1/oauth/apps List OAuth apps for the tenant #
POST /v1/oauth/apps Register an OAuth app (developer-facing) #
DELETE /v1/oauth/apps/{id} Revoke an OAuth app (soft delete — sets active=false) #
GET /v1/observability Observability surface summary (broadcast state + destination count +… #
GET /v1/observability/config Get the full broadcast config (enabled + destinations) #
PUT /v1/observability/config Enable or disable broadcasting for the tenant #
GET /v1/observability/destinations List configured broadcast destinations for the tenant #
POST /v1/observability/destinations Add a broadcast destination #
DELETE /v1/observability/destinations/{id} Remove a broadcast destination #
PUT /v1/observability/destinations/{id} Update a broadcast destination #
GET /v1/observability/templates List available integration template names #
GET /v1/observability/templates/{provider} Get a single integration template (config schema + example) #
POST /v1/observability/test/{id} Deliver a synthetic event to a destination and report the observed outcome #
GET /v1/observability/xdr/destinations List XDR/SIEM destinations for the tenant #
POST /v1/observability/xdr/destinations Register a new XDR/SIEM destination #
DELETE /v1/observability/xdr/destinations/{id} Remove an XDR/SIEM destination #
PUT /v1/observability/xdr/destinations/{id} Update an XDR/SIEM destination (partial) #
POST /v1/observability/xdr/destinations/{id}/enable Toggle an XDR destination on/off #
GET /v1/observability/xdr/destinations/{id}/stats Get delivery stats for an XDR destination #
POST /v1/observability/xdr/destinations/{id}/test Send a synthetic test event to a destination #
POST /v1/onboard Personalized one-call agent setup: identity, models, tools, budget, bootstrap… #
GET /v1/operator-registry/list List operator-facing god-mode capabilities from the platform… #
GET /v1/ops/alert-log Recent alert-delivery receipts + last delivery timestamp — proves SNS alarms… #
GET /v1/ops/build Authenticated runtime build identity for evidence-gated production verification #
POST /v1/ops/circuit/reset Manually reset circuit breakers (endpoint, provider, or all). #
GET /v1/ops/diagnose GET alias for /v1/ops/diagnose (read-only fleet diagnosis) #
POST /v1/ops/diagnose Run provider-doctor against the fleet; returns structured diagnoses +… #
GET /v1/ops/status Single-pane-of-glass status: providers, endpoints, budget, usage #
GET /v1/presets List active routing presets for the tenant #
POST /v1/presets Create a routing preset (saved `@preset/` configuration) #
DELETE /v1/presets/{slug} Archive a routing preset (soft-delete) #
GET /v1/presets/{slug} Get a routing preset by slug #
PUT /v1/presets/{slug} Update a routing preset (partial) #
GET /v1/projects List active projects (optionally filtered by ?workspaceId=) #
POST /v1/projects Create a project under an existing workspace #
GET /v1/projects/registry List registered projects for the current tenant #
POST /v1/projects/registry Register or sync a project (upsert by name; 201 on create, 200 on update) #
GET /v1/projects/registry/{name} Get a single registered project by name (404 on missing) #
PUT /v1/projects/registry/{name} Update project metadata (404 on missing) #
DELETE /v1/projects/{id} Archive a project (soft-delete) #
GET /v1/projects/{id} Get a project by id #
PUT /v1/projects/{id} Update a project (partial) #
GET /v1/projects/{id}/activity Get recent activity for a project (filterable by ?since=1h) #
POST /v1/projects/{id}/activity Report an activity record for a project #
GET /v1/projects/{id}/config Get a project's routing config #
POST /v1/projects/{id}/config Set project routing config (default model, budget, conventions, etc.) #
GET /v1/prompts List all prompt templates for the tenant #
POST /v1/prompts Create a versioned prompt template #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/brainstormrouter-com:brainstormrouter-com-system-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

brainstormrouter-com-system-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: BrainstormRouter System API
  version: 1.0.0
  description: 'Autonomous AI API Engine — multi-tenant gateway that intelligently routes

    AI traffic across providers with built-in memory, cost optimization, and

    autonomous background processing.


    All `/v1/*` endpoints require an API key via `Authorization: Bearer `.'
  contact:
    name: BrainstormRouter
    url: https://brainstormrouter.com
  license:
    name: Proprietary
    identifier: LicenseRef-Proprietary
servers:
- url: https://api.brainstormrouter.com
  description: Production
security:
- BearerAuth: []
tags:


# --- truncated at 32 KB (293 KB total) ---
# Full source: https://artifacts.apis.io/brainstormrouter-com/openapi/brainstormrouter-com-system-api-openapi.yml