Back to dashboard
PlatPhorm Network APIs
Real operations parsed from public OpenAPI documents. Ownership and source specs remain explicit.
API discovery evidence
Unknown is never used: each trusted site is active, unsupported, protected, invalid, degraded, or not yet probed.
GET/api/health
Service health
GET/api/v1/health
Service health v1
GET/api/mcp
Get MCP transport metadata
POST/api/mcp
Call MCP endpoint
POST/api/scan
External API scan
GET/api/health
Service health
GET/api/v1/health
Versioned service health
GET/api/docs
Human-readable API docs
GET/api/mcp
MCP metadata
POST/api/mcp
MCP JSON-RPC 2.0 endpoint
GET/v1/principal
Principal profile from redacted authorized-local state or public-safe fallback
GET/v1/clients
List redacted saved client summaries
POST/v1/clients
Create an authorized client record
GET/v1/clients/{id}
Get redacted client summary
GET/v1/findings
List exposure findings
POST/v1/findings
Create finding
GET/v1/findings/{id}
Get finding detail
GET/v1/evidence
List redacted authorized-local evidence records or public-safe fallback
GET/v1/evidence/{id}
Get evidence detail with protected fields only when authorized
GET/v1/risk/stealthscore
StealthScore snapshot
GET/v1/risk/rubric
SigReduce risk rubric
GET/v1/risk/summary
Risk summary by finding
GET/v1/kanban
Case Kanban board
GET/v1/calendar
30-day cadence calendar
GET/v1/actions
Action packet queue
POST/v1/actions/draft
Draft an action packet
GET/v1/reports
List report summaries
GET/v1/production-readiness
Production readiness from runtime, client, case, and Vercel ecosystem state
GET/v1/vercel/notebook
Public-safe Vercel Observability Notebook blueprint for daily operations
POST/v1/portal/session/role
Create a scoped RBAC role session for the Michael Barbine admin, case-manager, or customer view
POST/v1/portal/session/pilot-role
Legacy compatibility alias for scoped RBAC role sessions
GET/v1/paywall/status
Inspect Stripe paywall readiness without exposing key values
POST/v1/paywall/checkout
Create a Stripe Checkout session for Custom Cloak when server-side Cloak3D Stripe config is present
POST/v1/paywall/webhook
Receive verified Stripe webhook events and record protected billing intents
POST/v1/reports/generate
Generate executive report
POST/v1/reports/{id}/review
Record human report review intent
POST/v1/reports/{id}/publish-docs
Publish a visibility-policy report to PlatPhorm Docs
GET/v1/reports/{id}/export-sheets
Preview Sheets export evidence references
POST/v1/reports/{id}/export-sheets
Export visibility-policy report rows to PlatPhorm Sheets
POST/v1/reports/{id}/upload-files
Upload visibility-policy report markdown to PlatPhorm Files
POST/v1/reports/{id}/run-browserops
Run a BrowserOps journey for the Cloak case surface
POST/v1/reports/{id}/run-sandbox
Start a Sandbox lifecycle run with visibility-policy report context
POST/v1/operator/self-case
Create or refresh a selected authorized client workload through server-side operator auth
GET/v1/operator/clients
List saved clients through server-side operator auth
POST/v1/operator/clients
Save an authorized client profile to Postgres
POST/v1/operator/osint
Run authorized OSINT/Pentest dry-run handoff and store evidence
GET/v1/operator/osint/connectors
List configured OSINT connector adapters and missing local requirements
POST/v1/operator/osint/connectors
Run authorized OSINT connector adapters and persist findings, evidence, tasks, and intent ledger rows
GET/v1/operator/osint/runs
List persisted OSINT run ledger rows
GET/v1/operator/phone/numverify
Inspect Numverify phone-validation readiness for a selected client
POST/v1/operator/phone/numverify
Queue or run server-side Numverify validation for an authorized phone identifier
POST/v1/operator/webhooks/test
Emit or record a protected Cloak webhook event
GET/v1/operator/schedules/osint
List persisted OSINT schedules
POST/v1/operator/schedules/osint
Create a daily, weekly, monthly, or one-time OSINT approval schedule
POST/v1/operator/schedules/osint/progress
Advance due OSINT schedules and move linked Kanban cards
GET/v1/operator/infrastructure/aws
Inspect AWS S3/RDS provisioning plan without exposing secrets
POST/v1/operator/infrastructure/aws
Ensure S3 evidence storage or request RDS PostgreSQL provisioning
GET/v1/operator/workflows/self-case
Inspect Vercel Workflow readiness for the authorized self-case pipeline
POST/v1/operator/workflows/self-case
Queue the durable Vercel Workflow self-case pipeline when running on Vercel
POST/v1/operator/reports/{id}/{action}
Run server-side report generation or platform handoff action
GET/v1/integrations/status
Integration status
GET/v1/integrations/vercel-connect
Inspect Vercel Connect OAuth readiness and callback metadata
POST/v1/integrations/vercel-connect
Start Vercel Connect authorization or inspect token metadata without returning tokens to the browser
GET/v1/trust-artifacts
Public-safe platform trust artifact registry for AgentOps, TrustOps, WebhookLab, and Sandbox
GET/v1/ui
Product UI state
GET/v1/ui/screens
Product screen and surface registry
GET/v1/capabilities
PED OS capability catalog, screen bindings, and support flags
POST/v1/capabilities
Bootstrap Postgres capability support
GET/v1/cockpit/actions
List public cockpit action surfaces
POST/v1/cockpit/actions
Execute an allowlisted cockpit action through server-side operator routes
GET/v1/setup
Persistent backend setup status
POST/v1/setup
Initialize Postgres persistence tables including case-state records
POST/v1/workloads/self-case
Execute an authorized self-case workload with profile, evidence, findings, tasks, and audit intent
POST/v1/kanban/tasks/{id}/move
Move a persisted local case task between Kanban lanes
GET/v1/loop
Defense loop ledger from principal to report
POST/v1/loop
Record a Postgres loop ledger checkpoint
GET/v1/intents
Read protected intent ledger
POST/v1/integrations/{service}/{action}
Protected integration trigger or report handoff delegate
GET/events
Public-safe event outbox with optional protected view
POST/webhooks
Signed idempotent webhook receiver