GitLab Internal operations API

Operations related to internal operations.

Operations 18

POST /api/v4/ai/duo_workflows/workflows/{id}/audit_events Ingest AI audit events from Duo Workflow Service #
POST /api/v4/ai/duo_workflows/revoke_token Revoke ai_workflows token #
GET /api/v4/ai/duo_workflows/workflows/{id} Get workflow details #
PATCH /api/v4/ai/duo_workflows/workflows/{id} Update the workflow status #
POST /api/v4/ai/duo_workflows/workflows/{id}/checkpoints Create workflow checkpoint #
GET /api/v4/ai/duo_workflows/workflows/{id}/checkpoints List all workflow checkpoints #
GET /api/v4/ai/duo_workflows/workflows/{id}/checkpoints/by_thread_ts Get a workflow checkpoint reconstructed from incremental blobs #
GET /api/v4/ai/duo_workflows/workflows/{id}/checkpoints/{checkpoint_id} Get details on a workflow checkpoint #
POST /api/v4/ai/duo_workflows/workflows/{id}/checkpoint_writes_batch Create multiple workflow checkpoint writes #
POST /api/v4/ai/duo_workflows/workflows/{id}/events Create workflow event #
GET /api/v4/ai/duo_workflows/workflows/{id}/events List all workflow events #
PUT /api/v4/ai/duo_workflows/workflows/{id}/events/{event_id} Update workflow event #
GET /api/v4/internal/agents/agentw/agent_info Gets agentw info #
GET /api/v4/internal/agents/agentw/authorize_user_access authorize_user_access #
GET /api/v4/internal/agents/agentw/server_config server_config #
POST /api/v4/projects/{id}/merge_requests/{merge_request_iid}/suggested_reviewers Set the AI-recommended reviewers for a merge request #
POST /api/v4/integrations/slack/options Get Slack interactive component options #
POST /api/v4/integrations/slack/interactions Process Slack interaction events #

Documentation

📖
Documentation
https://docs.gitlab.com/api/openapi/
📖
Documentation
https://docs.gitlab.com/api/issues/
📖
Authentication
https://docs.gitlab.com/api/rest/authentication/
📖
Documentation
https://docs.gitlab.com/api/merge_requests/
📖
Documentation
https://docs.gitlab.com/api/pipelines/
📖
Documentation
https://docs.gitlab.com/api/jobs/
📖
Documentation
https://docs.gitlab.com/api/runners/
📖
Documentation
https://docs.gitlab.com/api/users/
📖
Documentation
https://docs.gitlab.com/api/repositories/
📖
Documentation
https://docs.gitlab.com/api/commits/
📖
Documentation
https://docs.gitlab.com/api/branches/
📖
Documentation
https://docs.gitlab.com/api/tags/
📖
Documentation
https://docs.gitlab.com/api/releases/
📖
Documentation
https://docs.gitlab.com/api/environments/
📖
Documentation
https://docs.gitlab.com/api/deployments/
📖
Documentation
https://docs.gitlab.com/api/pipeline_schedules/
📖
Documentation
https://docs.gitlab.com/api/labels/
📖
Documentation
https://docs.gitlab.com/api/milestones/
📖
Documentation
https://docs.gitlab.com/api/notes/
📖
Documentation
https://docs.gitlab.com/api/snippets/
📖
Documentation
https://docs.gitlab.com/api/packages/
📖
Documentation
https://docs.gitlab.com/api/container_registry/
📖
Documentation
https://docs.gitlab.com/api/vulnerabilities/
📖
Documentation
https://docs.gitlab.com/api/deploy_keys/
📖
Documentation
https://docs.gitlab.com/api/protected_branches/
📖
Documentation
https://docs.gitlab.com/api/wikis/
📖
Documentation
https://docs.gitlab.com/api/events/
📖
Documentation
https://docs.gitlab.com/api/search/
📖
Documentation
https://docs.gitlab.com/api/namespaces/
📖
Documentation
https://docs.gitlab.com/api/groups/
📖
Documentation
https://docs.gitlab.com/api/projects/
📖
Documentation
https://docs.gitlab.com/api/applications/
📖
Documentation
https://docs.gitlab.com/api/avatar/
📖
Documentation
https://docs.gitlab.com/api/broadcast_messages/
📖
Documentation
https://docs.gitlab.com/api/bulk_imports/
📖
Documentation
https://docs.gitlab.com/api/settings/
📖
Documentation
https://docs.gitlab.com/api/metadata/
📖
Documentation
https://docs.gitlab.com/api/version/
📖
Documentation
https://docs.gitlab.com/api/rest/
📖
APIReference
https://docs.gitlab.com/api/api_resources/
📖
RateLimits
https://docs.gitlab.com/security/rate_limits/
📖
Documentation
https://docs.gitlab.com/api/oauth2/
📖
Authentication
https://docs.gitlab.com/integration/oauth_provider/
📖
Documentation
https://docs.gitlab.com/user/project/integrations/webhooks.html
📖
APIReference
https://docs.gitlab.com/api/project_webhooks/

Specifications

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-put-api-v4-application-settings-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-apientities-geo-node-status-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-apientities-geo-site-status-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-apientities-application-setting-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-post-api-v4-geo-status-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-put-api-v4-projects-id-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-cluster-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-batched-background-migration-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-ci-variable-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-dictionary-table-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-plan-limit-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-appearance-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-avatar-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-bulk-imports-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-bulk-import-schema.json
📊
JSONSchema
https://artifacts.apis.io/gitlab/json-schema/gitlab-api-entities-metadata-schema.json

Other Resources

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/gitlab:gitlab-internal-operations-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

gitlab-internal-operations-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: GitLab REST Internal operations API
  description: GitLab REST API used to interact with a GitLab installation.
  termsOfService: https://handbook.gitlab.com/handbook/legal/api-terms/
  version: '19.6'
  license:
    name: CC BY-SA 4.0
    url: https://gitlab.com/gitlab-org/gitlab/-/blob/master/LICENSE
    x-gitlab-description: The license applies to the OpenAPI specification document itself. For terms governing use of the GitLab API, see the termsOfService field.
servers:
- url: https://{hostname}
  description: GitLab REST API
  variables:
    hostname:
      default: gitlab.com
      description: Your GitLab instance hostname
security:
- http: []
- oauth2: []
- apiKey: []
tags:
- name: Internal operations
  description: Operations related to internal operations.
paths:
  /api/v4/ai/duo_workflows/workflows/{id}/audit_events:
    post:
      operationId: postApiV4AiDuoWorkflowsWorkflowsIdAuditEvents
      summary: Ingest AI audit events from Duo Workflow Service
      tags:
      - Internal operations
      responses:
        '202':
          description: Accepted
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postApiV4AiDuoWorkflowsWorkflowsIdAuditEventsRequest'
  /api/v4/ai/duo_workflows/revoke_token:
    post:
      operationId: postApiV4AiDuoWorkflowsRevokeToken
      summary: Revoke ai_workflows token
      description: Revokes an active Duo Workflows authentication token.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '422':
          description: Unprocessable Entity
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postApiV4AiDuoWorkflowsRevokeTokenRequest'
  /api/v4/ai/duo_workflows/workflows/{id}:
    get:
      operationId: getApiV4AiDuoWorkflowsWorkflowsId
      summary: Get workflow details
      description: Retrieves detailed information about a specific workflow by its ID.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsWorkflow'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
        example: 1
    patch:
      operationId: patchApiV4AiDuoWorkflowsWorkflowsId
      summary: Update the workflow status
      description: Updates the execution status of a specified workflow.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
        example: 1
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/patchApiV4AiDuoWorkflowsWorkflowsIdRequest'
  /api/v4/ai/duo_workflows/workflows/{id}/checkpoints:
    post:
      operationId: postApiV4AiDuoWorkflowsWorkflowsIdCheckpoints
      summary: Create workflow checkpoint
      description: Creates a new checkpoint state for an active workflow execution.
      tags:
      - Internal operations
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsBasicCheckpoint'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postApiV4AiDuoWorkflowsWorkflowsIdCheckpointsRequest'
    get:
      operationId: getApiV4AiDuoWorkflowsWorkflowsIdCheckpoints
      summary: List all workflow checkpoints
      description: Lists all checkpoints associated with a specific workflow.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsCheckpoint'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      - name: accept_compressed
        required: false
        description: If `true`, returns compressed checkpoints.
        schema:
          type: boolean
          default: false
        in: query
      - name: checkpoint_ns
        required: false
        description: 'Only return checkpoints belonging to this LangGraph checkpoint namespace (the flow''s own top-level lineage if omitted or blank). Unset (the default): return checkpoints from every lineage, unfiltered, preserving prior behavior.'
        schema:
          type:
          - string
          - 'null'
          maxLength: 4096
        in: query
      - name: channels
        required: false
        description: Comma-separated channels to return in each checkpoint's channel_values, at most 100, each 1 to 255 characters. Omit to return every channel.
        schema:
          type:
          - array
          - 'null'
          items:
            type: string
        in: query
        style: form
        explode: false
  /api/v4/ai/duo_workflows/workflows/{id}/checkpoints/by_thread_ts:
    get:
      operationId: getApiV4AiDuoWorkflowsWorkflowsIdCheckpointsByThreadTs
      summary: Get a workflow checkpoint reconstructed from incremental blobs
      description: Retrieves a full workflow checkpoint reconstructed from incremental data blobs.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsCheckpoint'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      - name: thread_ts
        required: true
        description: The langgraph thread_ts of the checkpoint
        schema:
          type:
          - string
          - 'null'
        in: query
      - name: accept_compressed
        required: false
        description: If `true`, returns the compressed checkpoint.
        schema:
          type: boolean
          default: false
        in: query
  /api/v4/ai/duo_workflows/workflows/{id}/checkpoints/{checkpoint_id}:
    get:
      operationId: getApiV4AiDuoWorkflowsWorkflowsIdCheckpointsCheckpointId
      summary: Get details on a workflow checkpoint
      description: Retrieves detailed information about a specific workflow checkpoint.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsCheckpoint'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      - name: checkpoint_id
        required: true
        description: ID of the checkpoint.
        schema:
          type: integer
        in: path
        example: 1
      - name: accept_compressed
        required: false
        description: If `true`, returns the compressed checkpoint.
        schema:
          type: boolean
          default: false
        in: query
  /api/v4/ai/duo_workflows/workflows/{id}/checkpoint_writes_batch:
    post:
      operationId: postApiV4AiDuoWorkflowsWorkflowsIdCheckpointWritesBatch
      summary: Create multiple workflow checkpoint writes
      description: Writes multiple checkpoint entries for a workflow in a single request.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postApiV4AiDuoWorkflowsWorkflowsIdCheckpointWritesBatchRequest'
  /api/v4/ai/duo_workflows/workflows/{id}/events:
    post:
      operationId: postApiV4AiDuoWorkflowsWorkflowsIdEvents
      summary: Create workflow event
      description: Creates a new event for a specified workflow execution.
      tags:
      - Internal operations
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsEvent'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postApiV4AiDuoWorkflowsWorkflowsIdEventsRequest'
    get:
      operationId: getApiV4AiDuoWorkflowsWorkflowsIdEvents
      summary: List all workflow events
      description: Retrieves a list of all events associated with a specific workflow.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsEvent'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
  /api/v4/ai/duo_workflows/workflows/{id}/events/{event_id}:
    put:
      operationId: putApiV4AiDuoWorkflowsWorkflowsIdEventsEventId
      summary: Update workflow event
      description: Updates an existing event for a specified workflow.
      tags:
      - Internal operations
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsEvent'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
      parameters:
      - name: id
        required: true
        description: ID of the workflow.
        schema:
          type: integer
        in: path
      - name: event_id
        required: true
        description: ID of the event.
        schema:
          type: integer
        in: path
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/putApiV4AiDuoWorkflowsWorkflowsIdEventsEventIdRequest'
  /api/v4/internal/agents/agentw/agent_info:
    get:
      operationId: getApiV4InternalAgentsAgentwAgentInfo
      summary: Gets agentw info
      description: Retrieves agent info for agentw for the given workspace token
      tags:
      - Internal operations
      responses:
        '200':
          description: Agentw info retrieved successfully
        '401':
          description: Unauthorized
  /api/v4/internal/agents/agentw/authorize_user_access:
    get:
      operationId: getApiV4InternalAgentsAgentwAuthorizeUserAccess
      summary: authorize_user_access
      description: Returns whether the user is authorized to access the workspace.
      tags:
      - Internal operations
      responses:
        '200':
          description: User access authorization info retrieved successfully
        '400':
          description: Bad Request
      parameters:
      - name: workspace_host
        required: true
        description: Host of the workspace being accessed.
        schema:
          type:
          - string
          - 'null'
        in: query
      - name: user_id
        required: true
        description: ID of the user accessing the workspace.
        schema:
          type:
          - integer
          - 'null'
        in: query
  /api/v4/internal/agents/agentw/server_config:
    get:
      operationId: getApiV4InternalAgentsAgentwServerConfig
      summary: server_config
      description: Returns configuration for Workspaces HTTP Server.
      tags:
      - Internal operations
      responses:
        '200':
          description: Server config retrieved successfully
        '401':
          description: Unauthorized
  /api/v4/projects/{id}/merge_requests/{merge_request_iid}/suggested_reviewers:
    post:
      operationId: postApiV4ProjectsIdMergeRequestsMergeRequestIidSuggestedReviewers
      summary: Set the AI-recommended reviewers for a merge request
      description: Replaces the AI-recommended reviewers persisted for a specified merge request. Available only when the recommend reviewers flow is enabled for the project.
      tags:
      - Internal operations
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/APIEntitiesAiSuggestedReviewer'
        '400':
          description: Bad request
        '401':
          description: Unauthorized
        '403':
          description: Forbidden
        '404':
          description: Not found
        '429':
          description: Too many requests
      parameters:
      - name: id
        required: true
        description: The ID or URL-encoded path of the project.
        schema:
          oneOf:
          - type: string
          - type: integer
        in: path
      - name: merge_request_iid
        required: true
        description: The internal ID of the merge request.
        schema:
          type: integer
        in: path
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/postApiV4ProjectsIdMergeRequestsMergeRequestIidSuggestedReviewersRequest'
      x-gitlab-lifecycle: experiment
  /api/v4/integrations/slack/options:
    post:
      operationId: postApiV4IntegrationsSlackOptions
      summary: Get Slack interactive component options
      description: Retrieves options for Slack interactive components
      tags:
      - Internal operations
      responses:
        '201':
          description: Created
        '400':
          description: Bad Request
  /api/v4/integrations/slack/interactions:
    post:
      operationId: postApiV4IntegrationsSlackInteractions
      summary: Process Slack interaction events
      description: Processes interaction events from Slack
      tags:
      - Internal operations
      responses:
        '201':
          description: Created
        '400':
          description: Bad Request
components:
  schemas:
    postApiV4ProjectsIdMergeRequestsMergeRequestIidSuggestedReviewersRequest:
      type: object
      properties:
        suggestions:
          type:
          - array
          - 'null'
          description: Recommended reviewers (maximum is 50).
          items:
            type: object
            properties:
              user_id:
                type:
                - integer
                - 'null'
                description: ID of the recommended user.
              reason:
                type:
                - string
                - 'null'
                description: Model rationale for the recommendation (maximum 2048 characters).
                maxLength: 2048
              approval_rule_id:
                type:
                - integer
                - 'null'
                description: ID of the approval rule the user was suggested for.
              approval_rule_type:
                type: string
                enum:
                - merge_request_rule
                - project_rule
                description: Type of the approval rule the user was suggested for.
                minLength: 1
            required:
            - user_id
            - approval_rule_type
      required:
      - suggestions
    patchApiV4AiDuoWorkflowsWorkflowsIdRequest:
      type: object
      properties:
        status_event:
          type:
          - string
          - 'null'
          description: Status event to apply to the workflow, for example `finish`.
          example: finish
        drop_reason:
          type:
          - string
          - 'null'
          description: Why the service dropped the session. Ignored unless status_event is drop; a value the service may not name is recorded as api_reported
          example: token_rejected
          maxLength: 64
      required:
      - status_event
    putApiV4AiDuoWorkflowsWorkflowsIdEventsEventIdRequest:
      type: object
      properties:
        event_status:
          type: string
          enum:
          - queued
          - delivered
          description: Status of the event.
          minLength: 1
      required:
      - event_status
    APIEntitiesAiDuoWorkflowsCheckpoint:
      type: object
      properties:
        id:
          type: string
        thread_ts:
          type: string
        parent_ts:
          type: string
        checkpoint_ns:
          type: string
        checkpoint:
          type: string
        compressed_checkpoint:
          type: string
        checkpoint_writes:
          type: array
          items:
            $ref: '#/components/schemas/APIEntitiesAiDuoWorkflowsCheckpointWrite'
        current_thread:
          type: string
        metadata:
          type: string
    APIEntitiesAiSuggestedReviewer:
      type: object
      properties:
        user:
          $ref: '#/components/schemas/APIEntitiesUserBasic'
        reason:
          type: string
          example: Authored most of the changed files.
        approval_rule:
          type: object
        created_at:
          type: string
          format: date-time
          example: '2022-01-31T15:10:45.080Z'
    APIEntitiesAiDuoWorkflowsWorkflow:
      type: object
      properties:
        id:
          type: string
        web_url:
          type: string
          example: https://gitlab.example.com/group/project/-/automate/agent-sessions/42
        project_id:
          type: string
        namespace_id:
          type: string
        agent_privileges:
          type: string
        agent_privileges_names:
          type: string
        pre_approved_agent_privileges:
          type: string
        pre_approved_agent_privileges_names:
          type: string
        workflow_definition:
          type: string
        status:
          type: string
        summary:
          type: string
        title:
          type: string
        allow_agent_to_request_user:
          type: string
        image:
          type: string
        environment:
          type: string
        ai_catalog_item_version_id:
          type: string
        workload:
          type: string
        mcp_enabled:
          type: string
        incremental_checkpoints_enabled:
          type: string
        gitlab_url:
          type: string
    APIEntitiesAiDuoWorkflowsEvent:
      type: object
      properties:
        id:
          type: string
        correlation_id:
          type: string
        event_type:
          type: string
        event_status:
          type: string
        message:
          type: string
    postApiV4AiDuoWorkflowsRevokeTokenRequest:
      type: object
      properties:
        token:
          type:
          - string
          - 'null'
          description: Access token to revoke.
      required:
      - token
    APIEntitiesCustomAttribute:
      type: object
      properties:
        key:
          type: string
          example: foo
        value:
          type: string
          example: bar
    APIEntitiesAiDuoWorkflowsBasicCheckpoint:
      type: object
      properties:
        id:
          type: string
        thread_ts:
          type: string
        parent_ts:
          type: string
        checkpoint_ns:
          type: string
    APIEntitiesAiDuoWorkflowsCheckpointWrite:
      type: object
      properties:
        id:
          type: string
        thread_ts:
          type: string
        task:
          type: string
        idx:
          type: string
        channel:
          type: string
        write_type:
          type: string
        data:
          type: string
    postApiV4AiDuoWorkflowsWorkflowsIdCheckpointsRequest:
      type: object
      properties:
        thread_ts:
          type:
          - string
          - 'null'
          description: LangGraph `thread_ts` of the checkpoint.
        parent_ts:
          type:
          - string
          - 'null'
          description: The parent ts
        checkpoint_ns:
          type:
          - string
          - 'null'
          description: LangGraph checkpoint namespace this checkpoint belongs to. Omitted (or blank) for the flow's own top-level checkpoint lineage. Set to LangGraph's namespace string for one nested subgraph invocation, for example a delegated subagent dispatched by `DelegationNode`.
          maxLength: 4096
        checkpoint:
          type:
          - object
          - 'null'
          description: Checkpoint content
        compressed_checkpoint:
          type:
          - string
          - 'null'
          description: Checkpoint content zlib compressed and base64 encoded
        metadata:
          type:
          - object
          - 'null'
          description: Checkpoint metadata.
        model_metadata_json:
          type:
          - string
          - 'null'
          description: JSON string of the model metadata.
        flow_metadata_json:
          type:
          - string
          - 'null'
          description: JSON string of the flow metadata.
        current_thread:
          type: integer
          description: Hint used to group blobs by thread during checkpoint reconstruction.
          default: 0
        channel_keys:
          type:
          - array
          - 'null'
          items:
            type: string
          description: Live channel membership of the checkpoint.
        channel_blobs:
          type:
          - array
          - 'null'
          description: Per-channel blobs for incremental checkpoint storage.
          items:
            type: object
            properties:
              channel:
                type:
                - string
                - 'null'
                description: Name of the channel.
                maxLength: 255
              version:
                type:
                - string
                - 'null'
                description: Version of the channel.
                maxLength: 255
              write_type:
                type:
                - string
                - 'null'
                description: Blob serialization type. The read path decodes zlib-compressed JSON, so producers must send "json".
                maxLength: 255
              step_action:
                type: string
                enum:
                - conversation
                - compaction
                description: Whether the blob is appended to the stored channel data (`conversation`) or replaces it (`compaction`).
                minLength: 1
              data:
                type:
                - string
                - 'null'
                description: Base64-encoded blob bytes.
                maxLength: 1398104
            required:
            - channel
            - version
            - write_type
            - step_action
            - data
      required:
      - thread_ts
      - metadata
    postApiV4AiDuoWorkflowsWorkflowsIdEventsRequest:
      type: object
      properties:
        event_type:
          type: string
          enum:
          - pause
          - resume
          - stop
          - message
          - response
          - require_input
          description: Type of event.
          minLength: 1
        message:
          type:
          - string
          - 'null'
          description: Message from the human.
        correlation_id:
          type:
          - string
          - 'null'
          description: Correlation ID for tracking events.
          pattern: (?:^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$)
      required:
      - event_type
      - message
    postApiV4AiDuoWorkflowsWorkflowsIdAuditEventsRequest:
      type: object
      properties:
        events:
          type:
          - array
          - 'null'
          description: Array of CloudEvents v1.0 envelopes.
          items:
            type: object
            properties:
              id:
                type:
                - string
                - 'null'
                description: ID of the CloudEvent, as a UUID.
              type:
                type:
                - string
                - 'null'
                description: Type of the event, for example `ai_llm_input_sent`.
              source:
                type:
                - string
                - 'null'
                description: CloudEvent source.
              time:
                type:
                - string
                - 'null'
                format: date-time
                description: Event timestamp from the gateway.
              data:
                type:
                - object
                - 'null'
                description: Event-specific payload.
            required:
            - id
            - type
            - source
            - time
      required:
      - events
    APIEntitiesUserBasic:
      type: object
      properties:
        id:
          type: integer
          format: int64
          example: 1
        username:
          type: string
          example: admin
        public_email:
          type: string
          example: john@example.com
        name:
          type: string
          example: Administrator
        state:
          type: string
          example: active
        locked:
          type: boolean
        avatar_url:
          type: string
          example: https://gravatar.com/avatar/1
        avatar_path:
          type: string
          example: /user/avatar/28/The-Big-Lebowski-400-400.png
        custom_attributes:
          type: array
          items:
            $ref: '#/components/schemas/APIEntitiesCustomAttribute'
        web_url:
          type: string
          example: https://gitlab.example.com/root
    postApiV4AiDuoWorkflowsWorkflowsIdCheckpointWritesBatchRequest:
      type: object
      properties:
        thread_ts:
          type:
          - string
          - 'null'
          description: LangGraph `thread_ts` of the checkpoint.
        checkpoint_writes:
          type:
          - array
          - 'null'
          description: List of checkpoint writes.
          items:
            type: object
            properties:
              task:
                type:
                - string
                - 'null'
                description: ID of the task.
              idx:
                type:
                - integer
                - 'null'
                description: Index of the checkpoint write.
              channel:
                type:
                - string
                - 'null'
                description: Name of the channel.
              write_type:
                type:
                - string
                - 'null'
                description: Type of data.
              data:
                type:
                - string
                - 'null'
                description: Checkpoint write data.
            required:
            - task
            - idx
            - channel
            - write_type
            - data
      required:
      - thread_ts
      - checkpoint_writes
  securitySchemes:
    http:
      type: http
      scheme: bearer
    oauth2:
      type: oauth2
      flows:
        authorizationCode:
          authorizationUrl: https://gitlab.com/oauth/authorize
          tokenUrl: https://gitlab.com/oauth/token
          refreshUrl: https://gitlab.com/oauth/token
          scopes:
            api: Grants complete read/write access to the API, including all groups and projects, the container registry, the dependency proxy, and the package registry.
            read_api: Grants read access to the API, including all groups and projects, the container registry, and the package registry.
            read_user: Grants read-only access to your profile through the /user API endpoint, which includes username, public email, and full name. Also grants access to read-only API endpoints under /users.
            create_runner: Grants create access to the runners.
            manage_runner: Grants access to manage the runners.
            k8s_proxy: Grants permission to perform Kubernetes API calls using the agent for Kubernetes.
            self_rotate: Grants permission for token to rotate itself.
            mcp: Grants read-write access to remote Model Context Protocol (MCP) server for tools execution.
            mcp_orbit: Grants access to the Orbit Knowledge Graph MCP server for graph queries and schema retrieval.
    apiKey:
      type: apiKey
      name: PRIVATE-TOKEN
      in: header