Probe a URL for an OpenAPI surface | CloudRaker documentation

Fetches url (and the conventional spec paths beside it) and lists the operations it declares, each labelled read or write. domainMismatch is true when the spec’s own base host differs from the host that was typed — confirm explicitly before importing (P5-D11). The URL is checked against the SSRF denylist before any fetch: HTTPS only, no loopback, private, link-local or .local/.internal hosts. Authorization: space:contribute. Returns { data: ConnectionDiscovery }.

Fetches `url` (and the conventional spec paths beside it) and lists the operations it declares, each labelled `read` or `write`. `domainMismatch` is true when the spec’s own base host differs from the host that was typed — confirm explicitly before importing (P5-D11). The URL is checked against the SSRF denylist before any fetch: HTTPS only, no loopback, private, link-local or `.local`/`.internal` hosts. Authorization: `space:contribute`. Returns `{ data: ConnectionDiscovery }`.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

spaceIdstringRequired

Request

This endpoint expects an object.

urlstringRequired>=1 character

Response

The discovered surface.

dataobject

$	curl -X POST https://api.cloudraker.com/spaces/spaceId/connections/discover \
>	-H "Authorization: Bearer <token>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"url": "https://api.example.com/openapi.json"
>	}'

1	{
2	"data": {
3	"baseUrl": "string",
4	"sourceUrl": "string",
5	"domainMismatch": true,
6	"typedHost": "string",
7	"operations": [
8	{
9	"id": "string",
10	"name": "string",
11	"description": "string",
12	"method": "string",
13	"path": "string",
14	"access": "read"
15	}
16	]
17	}
18	}