Skip to navigation

Probe a URL for an OpenAPI surface

View as Markdown

Fetches url (and the conventional spec paths beside it) and lists the operations it declares, each labelled read or write. domainMismatch is true when the spec’s own base host differs from the host that was typed — confirm explicitly before importing (P5-D11). The URL is checked against the SSRF denylist before any fetch: HTTPS only, no loopback, private, link-local or .local/.internal hosts. Authorization: space:contribute. Returns { data: ConnectionDiscovery }.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

spaceIdstringRequired

Request

This endpoint expects an object.
urlstringRequired>=1 character

Response

The discovered surface.
dataobject