Beta module namespace
catalog
Beta routes may change with notice and are NOT covered by the 24-month stable window of the core contract.
Every module route is enumerated with method, path, auth and required permission; request/response schemas are not published for the beta surface.
21 operations
| Method | Path | Required permission | Authentication | Summary |
|---|---|---|---|---|
| get | /v1/m/catalog/connector-admission/policy | catalog:entry:read | Bearer token | catalog module route (requires catalog:entry:read) |
| put | /v1/m/catalog/connector-admission/policy | catalog:entry:admin | Bearer token | Upserts the per-tenant trust root. Admin, audited. |
| get | /v1/m/catalog/connector-admissions | catalog:entry:read | Bearer token | Lists the recorded connector-entry admission verdicts. |
| get | /v1/m/catalog/entries | catalog:entry:read | Bearer token | Lists catalog entries, optionally filtered by kind/status/slug. |
| post | /v1/m/catalog/entries | catalog:entry:write | Bearer token | Creates a draft catalog entry. |
| get | /v1/m/catalog/entries/{id} | catalog:entry:read | Bearer token | Returns one catalog entry. |
| put | /v1/m/catalog/entries/{id} | catalog:entry:write | Bearer token | Updates a DRAFT entry in place. |
| delete | /v1/m/catalog/entries/{id} | catalog:entry:write | Bearer token | Deletes a DRAFT entry. |
| post | /v1/m/catalog/entries/{id}/admit | catalog:entry:admin | Bearer token | catalog module route (requires catalog:entry:admin) |
| post | /v1/m/catalog/entries/{id}/approve | catalog:entry:admin | Bearer token | Approves a draft/pending entry: it pins the content hash, signs it when a catalog signing key is configured, records the approver and freezes the entry. |
| post | /v1/m/catalog/entries/{id}/deprecate | catalog:entry:admin | Bearer token | Retires an approved entry. |
| post | /v1/m/catalog/entries/{id}/instantiate | catalog:instance:write | Bearer token | Creates a self-service instantiation request FROM an approved catalog entry. |
| post | /v1/m/catalog/entries/{id}/submit | catalog:entry:write | Bearer token | Moves a draft entry to pending review. |
| get | /v1/m/catalog/entries/{id}/verify | catalog:entry:read | Bearer token | Recomputes and verifies an approved entry's integrity (hash + signature). |
| get | /v1/m/catalog/instances | catalog:instance:read | Bearer token | Lists instantiations, optionally filtered by status/entry_id. |
| get | /v1/m/catalog/instances/{id} | catalog:instance:read | Bearer token | Returns one instance. |
| post | /v1/m/catalog/instances/{id}/transition | catalog:instance:admin | Bearer token | Records a governance decision on an instance (approve/ reject/activate). |
| get | /v1/m/catalog/mcp-admission/policy | catalog:entry:read | Bearer token | catalog module route (requires catalog:entry:read) |
| put | /v1/m/catalog/mcp-admission/policy | catalog:entry:admin | Bearer token | Upserts the per-tenant trust root. Admin, audited. |
| get | /v1/m/catalog/mcp-admissions | catalog:entry:read | Bearer token | Lists the recorded MCP-entry admission verdicts. |
| get | /v1/m/catalog/pubkey | catalog:entry:read | Bearer token | Returns the catalog signing public key (for external verification), or reports that signing is not configured. |