overlay: 1.0.0
info:
title: API Evangelist enhancements for the Knak Enterprise API
version: 1.0.0
extends: openapi/knak-enterprise-openapi-original.yml
x-generated: '2026-07-19'
x-method: generated
x-source: API Evangelist enrichment pipeline
x-notes: >-
Captures API Evangelist observations about the Knak Enterprise API without mutating the
harvested original. The original spec declares no operationId values and no
securitySchemes even though the info description documents Bearer and OAuth2
authentication; both gaps are recorded here as extensions rather than patched in, so the
provider's contract remains the source of truth.
actions:
- target: $.info
update:
x-apievangelist-artifacts:
authentication: authentication/knak-authentication.yml
conventions: conventions/knak-conventions.yml
errors: errors/knak-problem-types.yml
lifecycle: lifecycle/knak-lifecycle.yml
data-model: data-model/knak-data-model.yml
webhooks: asyncapi/knak-enterprise-webhooks.yml
mcp: mcp/knak-mcp.yml
skills: skills/_index.yml
x-apievangelist-observations:
- No operationId is declared on any of the 44 operations, which prevents stable
operation references for SDK generation, Arazzo workflows and agent tooling.
- components.securitySchemes is absent and no root security requirement is declared,
although the info description documents a required Bearer token and an OAuth 2.0
authorization code flow.
- Errors are signalled by HTTP status alone; no RFC 9457 application/problem+json
representation is offered.
- No idempotency key is documented for the unsafe operations.
- No rate limit values or rate-limit response headers are published.
- target: $.info
update:
x-apievangelist-recommended-security-schemes:
bearerAuth:
type: http
scheme: bearer
description: Bearer token, obtained as an API key or via the OAuth 2.0
authorization code flow.
oauth2:
type: oauth2
flows:
authorizationCode:
authorizationUrl: https://enterprise.knak.io/oauth/authorize
tokenUrl: https://enterprise.knak.io/oauth/token
scopes: {}
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.