# run402-com Control Plane API

**Canonical:** https://apis.io/apis/run402-com/run402-com-controlplane-api/  
**Provider:** run402-com — https://apis.io/providers/run402-com/  
**Base URL:** https://api.run402.com  
**Documentation:** https://docs.run402.com/

run402-com Control Plane API is one of 43 APIs that [run402-com](https://apis.io/providers/run402-com/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include ControlPlane. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

The ControlPlane API from run402-com — 30 operation(s) for controlplane.

## Operations (30)

| Method | Path | Summary |
|---|---|---|
| POST | `/agent/v1/control-plane/session/email` | Send a control-plane sign-in magic link |
| POST | `/agent/v1/control-plane/session/email/verify` | Verify a magic link → mint a control-plane session |
| POST | `/agent/v1/control-plane/session/passkey/options` | WebAuthn login options for an email's passkeys |
| POST | `/agent/v1/control-plane/session/passkey/verify` | Verify a passkey assertion → mint a control-plane session |
| POST | `/agent/v1/control-plane/session/refresh` | Refresh (rotate) a control-plane session token |
| POST | `/agent/v1/control-plane/session/revoke` | Sign out the current control-plane session |
| POST | `/agent/v1/control-plane/session/browser` | Activate the control-plane browser cookie transport |
| POST | `/agent/v1/control-plane/session/browser/refresh` | Refresh the control-plane browser cookie |
| POST | `/agent/v1/control-plane/session/browser/revoke` | Revoke the control-plane browser cookie session |
| POST | `/agent/v1/control-plane/write-approval/challenges` | Open a passkey write-intent ceremony (write-approval) |
| POST | `/agent/v1/control-plane/write-approval/verify` | Verify a write-intent assertion and mint the write approval |
| POST | `/agent/v1/control-plane/write-approval/cli/token` | Exchange a CLI loopback claim code for the write approval token (PKCE) |
| GET | `/agent/v1/control-plane/write-approval/sessions` | List active write approvals bound to this control-plane session |
| POST | `/agent/v1/control-plane/write-approval/sessions/{write_approval_session_id}/revoke` | Revoke one write approval |
| POST | `/agent/v1/control-plane/write-approval/revoke-all` | Revoke every write approval for the signed-in principal |
| POST | `/agent/v1/control-plane/passkey/enroll/options` | WebAuthn registration options (enroll a passkey) |
| POST | `/agent/v1/control-plane/passkey/enroll/verify` | Verify a passkey registration |
| POST | `/agent/v1/control-plane/step-up/options` | Step-up WebAuthn options for a high-stakes op |
| POST | `/agent/v1/control-plane/step-up/verify` | Verify step-up → record freshness + action-bound elevation |
| POST | `/agent/v1/control-plane/recovery/issue` | Issue recovery codes (shown once) |
| POST | `/agent/v1/control-plane/recovery/consume` | Consume a recovery code (recovery ceremony) |
| GET | `/agent/v1/control-plane/authenticators` | List my active authenticators |
| DELETE | `/agent/v1/control-plane/authenticators/{authenticator_id}` | Revoke an authenticator (owner-passkey policy enforced) |
| GET | `/agent/v1/control-plane/cli/authorize/{flow_id}` | Read a CLI loopback-PKCE authorize flow |
| POST | `/agent/v1/control-plane/cli/approve` | Approve a CLI loopback-PKCE login (passkey + step-up) |
| POST | `/agent/v1/control-plane/cli/token` | Exchange a CLI auth code for a control-plane session |
| POST | `/agent/v1/control-plane/oauth/{provider}/link` | Start an OAuth flow in LINK mode (attach to the current principal) |
| POST | `/agent/v1/control-plane/emails` | Request attaching an additional email to the current principal |
| POST | `/agent/v1/control-plane/emails/verify` | Confirm an email attach (inbox + session possession) |
| POST | `/agent/v1/control-plane/merge` | Merge a duplicate principal into the current one |

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/run402-com/openapi/run402-com-controlplane-api-openapi.yml
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-project-transfer-preview-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-deploy-plan-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-stable-host-resolve-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-release-inventory-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-mailbox-schema.json
- **JSONSchema** — https://artifacts.apis.io/run402-com/json-schema/run402-com-project-event-feed-page-schema.json

## Other run402-com APIs (12)

- [run402-com Admin API](https://apis.io/apis/run402-com/run402-com-admin-api/)
- [run402-com Agent API](https://apis.io/apis/run402-com/run402-com-agent-api/)
- [run402-com Agent Messaging API](https://apis.io/apis/run402-com/run402-com-agentmessaging-api/)
- [run402-com AI API](https://apis.io/apis/run402-com/run402-com-ai-api/)
- [run402-com App Repos API](https://apis.io/apis/run402-com/run402-com-app-repos-api/)
- [run402-com Apply API](https://apis.io/apis/run402-com/run402-com-apply-api/)
- [run402-com Auth API](https://apis.io/apis/run402-com/run402-com-auth-api/)
- [run402-com Billing API](https://apis.io/apis/run402-com/run402-com-billing-api/)
- [run402-com Buzz Control Plane API](https://apis.io/apis/run402-com/run402-com-buzz-control-plane-api/)
- [run402-com CI Federation API](https://apis.io/apis/run402-com/run402-com-ci-federation-api/)
- [run402-com Console API](https://apis.io/apis/run402-com/run402-com-console-api/)
- [run402-com Content API](https://apis.io/apis/run402-com/run402-com-content-api/)

## Tags

ControlPlane

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/run402-com/run402-com-controlplane-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/run402-com/.