GET/api-chirho/api-keys-chirhoLists up to 100 keys for the current tenant without revealing secrets.
ActiveControl-plane documentation derives from the executable catalog. Private engine REST now processes the synthetic demo; public API and MCP await a publishable contract.
GET/api-chirho/api-keys-chirhoLists up to 100 keys for the current tenant without revealing secrets.
ActivePOST/api-chirho/api-keys-chirhoIssues a key; its secret is returned exactly once.
ActiveDELETE/api-chirho/api-keys-chirhoRevokes a key scoped to the session tenant.
ActiveGET/api-chirho/dpa-chirhoReads the current data-processing agreement acceptance.
ActivePOST/api-chirho/dpa-chirhoRecords acceptance after the legal version is authorized.
Gate closedPOST/api-chirho/account-deletion-chirhoRequests grace-period deletion without orphaning a tenant.
Gate closedGET/api-chirho/reviews-chirhoThe tenant human review queue, with an API key scoped reviews:read (W7).
Gate closedPOST/api-chirho/reviews-chirhoAdjudicate a case with an API key scoped reviews:write, idempotent by Idempotency-Key (W7).
Gate closedPOST/api-chirho/recovery-chirhoRequests recovery with an anti-enumeration response.
Gate closedGET/api-chirho/webhooks-chirho/endpoints-chirhoLists the tenant webhook endpoints without revealing secrets.
Gate closedPOST/api-chirho/webhooks-chirho/endpoints-chirhoRegisters an endpoint; its signing secret is returned exactly once.
Gate closedDELETE/api-chirho/webhooks-chirho/endpoints-chirho/[endpoint_id_chirho]Revokes an endpoint scoped to the session tenant, with an audit event.
Gate closedPOST/api-chirho/webhooks-chirho/endpoints-chirho/[endpoint_id_chirho]/activation-chirhoActivates an endpoint by verifying the challenge signed with its secret.
Gate closedREST + MCP/verdict-engine/pending-chirhoThe BFF calls authenticated engine REST with allowlisted synthetic references. The token, staged refs, and raw bundle never reach the browser.
Public API pending