zorp-web’s API, served from the same origin as the UI. Loopback by
default; any other bind requires a token, and every route below sits
behind that check.
Routes for optional features exist in every build and answer with “off,
and here is why” (or 501) when the feature is not compiled in, so a
client can say why a button is disabled instead of interpreting a 404.
Route Method What it does
/api/healthGET Liveness /api/sessionsGET, POST List sessions, create one /api/sessions/:idGET One session /api/sessions/:id/turnPOST Start a turn /api/sessions/:id/stopPOST Stop the running turn /api/sessions/:id/eventsGET The event stream (SSE) /api/sessions/:id/approvePOST Answer a tool approval prompt /api/sessions/:id/auto-approveGET, POST Read or set auto-approve for one chat
Route Method What it does
/api/settingsGET, PUT Read and update settings. The key is never sent back out, only has_api_key /api/settings/modelsGET, POST List the endpoint’s models. A candidate key travels in the POST body, never a query string /api/settings/testPOST Probe the endpoint with a minimal real completion /api/capabilitiesGET Which optional tools are really there
Route Method What it does
/api/sessions/:id/panelPOST Launch an adversarial review panel /api/panel/lensesGET The code-defined review lenses /api/sessions/:id/investigatePOST Run one investigate attempt /api/investigate/statusGET Whether investigate is available, and whether forecasting is on /api/investigate/ledgerGET Read what landed in the aryabhatta ledger. Names no model-authored text column
Route Method What it does
/api/artifactsGET List workspace files /api/artifacts/rawGET Read one, allowlisted extensions only /api/recall/statusGET Whether conversation search is on /api/recall/indexPOST Force an index pass /api/recall/searchGET Semantic search over conversations /api/voice/statusGET Voice runtime status, read-only /api/voice/waitPOST Start readiness and wait for it /api/voice/transcribePOST Transcribe recorded audio (25 MB body limit)
The authoritative list is the router in
zorp-web/src/api.rs