---
title: "API endpoint families"
description: "Every current Tooluse.net API family, grouped by audience and task."
---

> Documentation Index
> Fetch the complete documentation index at: https://help.tooluse.net/llms.txt
> Use this file to discover all available pages before exploring further.

# API endpoint families

<p>All paths are relative to <code>https://api.tooluse.net</code>. The <a href="https://help.tooluse.net/openapi.yaml">generated OpenAPI file</a> contains every method, request schema, response schema, and validation rule in the current source build.</p>
<h2 id="public-configuration-and-device-flow">Public configuration and device flow</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>GET /v1/config</code></td>
<td>Hosted sign-in configuration</td>
</tr>
<tr>
<td><code>/v1/device/authorizations</code></td>
<td>Start, inspect, and poll device authorization</td>
</tr>
<tr>
<td><code>POST /v1/device/approvals</code></td>
<td>Signed-in human approval or refusal</td>
</tr>
<tr>
<td><code>POST /v1/device/tokens</code></td>
<td>Collect the developer token after approval</td>
</tr>
<tr>
<td><code>GET /v1/purchases/catalog</code></td>
<td>Vendor-neutral managed-operation catalog</td>
</tr>
</tbody>
</table>
<h2 id="developer-account-and-applications">Developer account and applications</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>/v1/account/tokens</code></td>
<td>Create, list, and revoke personal access tokens</td>
</tr>
<tr>
<td><code>/v1/applications</code></td>
<td>List and create applications</td>
</tr>
<tr>
<td><code>/v1/applications/{appId}</code></td>
<td>Read and rename one application</td>
</tr>
<tr>
<td><code>/members</code>, <code>/invitations</code></td>
<td>Membership and single-use invitations</td>
</tr>
<tr>
<td><code>/limits</code></td>
<td>Per-application provider admission limits</td>
</tr>
<tr>
<td><code>/operations/{id}</code></td>
<td>Configure an application operation</td>
</tr>
<tr>
<td><code>/credentials/{id}</code></td>
<td>Write or rotate an encrypted credential</td>
</tr>
</tbody>
</table>
<h2 id="agent-operations-and-actions">Agent operations and Actions</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>/v1/applications/{appId}/agent-keys</code></td>
<td>Issue, list, and revoke application Agent keys</td>
</tr>
<tr>
<td><code>/v1/agent/applications/{appId}/operations</code></td>
<td>Discover callable operations and schemas</td>
</tr>
<tr>
<td><code>/operations/{operationId}/invoke</code></td>
<td>Invoke one granted operation</td>
</tr>
<tr>
<td><code>/operations/{operationId}/prepare</code></td>
<td>Prepare one immutable end-user Action</td>
</tr>
<tr>
<td><code>/actions/{jobId}</code></td>
<td>Read and execute an approved Action</td>
</tr>
<tr>
<td><code>/invocations/{id}</code></td>
<td>Read an Agent-owned invocation receipt</td>
</tr>
</tbody>
</table>
<h2 id="connections-and-service-execution">Connections and service execution</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>/v1/applications/{appId}/connections</code></td>
<td>Discover services and manage application connections</td>
</tr>
<tr>
<td><code>/oauth-connections</code></td>
<td>List, authorize, and revoke OAuth connections</td>
</tr>
<tr>
<td><code>/oauth-providers/{providerId}/setup</code></td>
<td>Apply managed OAuth provider setup actions</td>
</tr>
<tr>
<td><code>/service-invocations</code></td>
<td>Test operations, list metadata, and read retained results</td>
</tr>
<tr>
<td><code>/service-reconciliations</code></td>
<td>Settle or release ambiguous managed invocations</td>
</tr>
</tbody>
</table>
<h2 id="workflows-and-automation">Workflows and automation</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>/v1/applications/{appId}/flows</code></td>
<td>List or deploy application workflow YAML</td>
</tr>
<tr>
<td><code>/workflow-operations</code></td>
<td>Publish, list, or withdraw workflow operations</td>
</tr>
</tbody>
</table>
<h2 id="consumer-and-identity">Consumer and identity</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>/v1/consumer/applications/{appId}/providers/{providerId}/{command}</code></td>
<td>OIDC session, profile, memory, Action, and receipt controls</td>
</tr>
<tr>
<td><code>/v1/applications/{appId}/identity</code></td>
<td>Read managed identity status</td>
</tr>
<tr>
<td><code>/identity/production/**</code></td>
<td>Prepare, check, and activate a production domain</td>
</tr>
<tr>
<td><code>/identity/phone-authentication</code></td>
<td>Configure usage-based phone authentication</td>
</tr>
<tr>
<td><code>/identity/enterprise-connections/**</code></td>
<td>Manage and test OIDC or SAML enterprise connections</td>
</tr>
<tr>
<td><code>/domains/{command}</code></td>
<td>Execute an application-owned domain command</td>
</tr>
</tbody>
</table>
<h2 id="credits-and-top-ups">Credits and top-ups</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>/v1/applications/{appId}/credits</code></td>
<td>Read account-shared credit and reservations</td>
</tr>
<tr>
<td><code>/v1/topups/applications/{appId}/quote</code></td>
<td>Read authoritative top-up packs and availability</td>
</tr>
<tr>
<td><code>/v1/topups/stripe/**</code></td>
<td>Owner-only checkout and automatic top-up settings</td>
</tr>
</tbody>
</table>
<h2 id="agentic-purchases--preview">Agentic purchases — Preview</h2>
<table>
<thead>
<tr>
<th>Path family</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>/v1/applications/{appId}/purchases</code></td>
<td>Create a bounded purchase intent</td>
</tr>
<tr>
<td><code>/purchases/{purchaseId}</code></td>
<td>Read redacted state and current revision</td>
</tr>
<tr>
<td><code>/approve</code>, <code>/cancel</code></td>
<td>Approve one digest or cancel before commit</td>
</tr>
<tr>
<td><code>/handoffs/**</code></td>
<td>Claim, read, complete, or cancel an exclusive human-control lease</td>
</tr>
</tbody>
</table>
<p>These routes are a preview control plane, not a production browser or payment executor. See <a href="/agentic-purchases/availability">Availability and boundaries</a>.</p>
<h2 id="restricted-families">Restricted families</h2>
<p>Operator, internal runtime, signed webhook, provider callback, legacy bridge, and historical purchase-provisioning routes are documented separately in <a href="/reference/private-endpoints">Private and callback endpoints</a>.</p>

Source: https://help.tooluse.net/reference/api/index.mdx