Beta module namespace
models
Beta routes may change with notice and are NOT covered by the 24-month stable window of the core contract.
Every module route is enumerated with method, path, auth and required permission; request/response schemas are not published for the beta surface.
67 operations
| Method | Path | Required permission | Authentication | Summary |
|---|---|---|---|---|
| get | /v1/m/models/access-tier-entitlements | models:routing:read | Bearer token | Lists operator-attested entitlement states, optionally filtered by tier or state. |
| put | /v1/m/models/access-tier-entitlements | models:routing:write | Bearer token | Records the current provider-side entitlement state for one restricted tier. |
| get | /v1/m/models/admission-policy | models:admission:read | Bearer token | models module route (requires models:admission:read) |
| put | /v1/m/models/admission-policy | models:admission:admin | Bearer token | Upserts the per-tenant trust root. Admin-tier, audited. |
| get | /v1/m/models/agent-artifacts | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| post | /v1/m/models/agent-artifacts | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| get | /v1/m/models/agent-artifacts/aibom | models:registry:read | Bearer token | Returns the live agent-supply-chain BOM (read-only export, not sealed; read-tier, not audited — observer effect). |
| post | /v1/m/models/agent-artifacts/aibom | models:registry:write | Bearer token | Generates the agent-supply-chain BOM, anchors the audit-chain head, persists an append-only models.agent_aibom seal and self-audits it — the same pattern as handleSealAIBOM on the artifact inventory, so it is tamper-evident evidence (and a SEPARATE evidence class from the model-lineage seals compliance counts). |
| get | /v1/m/models/agent-artifacts/aiboms | models:registry:read | Bearer token | Lists the agent-supply-chain BOM seals. |
| delete | /v1/m/models/agent-artifacts/{id} | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| get | /v1/m/models/aiboms | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| get | /v1/m/models/catalog | models:catalog:read | Bearer token | Returns the declared reference catalog. |
| get | /v1/m/models/data-governance | models:catalog:read | Bearer token | Returns the Claude context-management / memory-tool + ZDR-eligibility matrix (CLA-15): for each feature, whether it can clear the model's working context server-side (a forensics implication), where its data persists, and whether it is ZDR-eligible (a data-residency concern). |
| get | /v1/m/models/datasets | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| post | /v1/m/models/datasets | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| delete | /v1/m/models/datasets/{id} | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| get | /v1/m/models/features | models:catalog:read | Bearer token | Returns the capability matrix: per API feature, which declared families support it. |
| get | /v1/m/models/finetune-jobs | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| post | /v1/m/models/finetune-jobs | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| get | /v1/m/models/finetune-jobs/{id} | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| put | /v1/m/models/finetune-jobs/{id} | models:registry:write | Bearer token | Records a status/lineage transition on a fine-tune job (the control plane TRACKS the job; it does not run it). |
| get | /v1/m/models/gpai-posture | models:gpai:read | Bearer token | Lists the attested GPAI posture of brokered providers, optionally filtered by provider_ref or verified. |
| put | /v1/m/models/gpai-posture | models:gpai:write | Bearer token | Records (or replaces) a provider's GPAI posture. |
| get | /v1/m/models/inference-deployments | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| post | /v1/m/models/inference-deployments | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| put | /v1/m/models/inference-deployments/{id} | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| delete | /v1/m/models/inference-deployments/{id} | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| get | /v1/m/models/keys | models:keys:read | Bearer token | Lists key/workspace governance references, optionally filtered by ref_kind, provider_ref or status. |
| post | /v1/m/models/keys | models:keys:write | Bearer token | Registers a new key/workspace governance reference. |
| put | /v1/m/models/keys/{id} | models:keys:write | Bearer token | Updates a key/workspace governance reference in place. |
| delete | /v1/m/models/keys/{id} | models:keys:write | Bearer token | Removes a key/workspace governance reference. |
| get | /v1/m/models/model-access | models:model-access:read | Bearer token | models module route (requires models:model-access:read) |
| post | /v1/m/models/model-access | models:model-access:admin | Bearer token | models module route (requires models:model-access:admin) |
| put | /v1/m/models/model-access/{id} | models:model-access:admin | Bearer token | models module route (requires models:model-access:admin) |
| delete | /v1/m/models/model-access/{id} | models:model-access:admin | Bearer token | models module route (requires models:model-access:admin) |
| get | /v1/m/models/model-admissions | models:admission:read | Bearer token | models module route (requires models:admission:read) |
| get | /v1/m/models/model-groups | models:model-group:read | Bearer token | models module route (requires models:model-group:read) |
| post | /v1/m/models/model-groups | models:model-group:write | Bearer token | models module route (requires models:model-group:write) |
| get | /v1/m/models/model-groups/{id} | models:model-group:read | Bearer token | models module route (requires models:model-group:read) |
| put | /v1/m/models/model-groups/{id} | models:model-group:write | Bearer token | models module route (requires models:model-group:write) |
| delete | /v1/m/models/model-groups/{id} | models:model-group:write | Bearer token | Deletes a model-group, but REFUSES (409) while any model-access grant still targets it — symmetric with create-time validateTargetGroup, which blocks a grant to a non-existent group. |
| get | /v1/m/models/model-versions | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| post | /v1/m/models/model-versions | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| delete | /v1/m/models/model-versions/{id} | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| post | /v1/m/models/model-versions/{id}/admit | models:admission:write | Bearer token | Verifies an OMS v1.0 signature for a model_version and records the verdict (upsert, claim-vs-verified). |
| get | /v1/m/models/models | models:catalog:read | Bearer token | Lists the governed core models (the live estate, enriched). |
| get | /v1/m/models/models/{id} | models:catalog:read | Bearer token | Returns one governed model with its provider reference. |
| get | /v1/m/models/owned-models | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| post | /v1/m/models/owned-models | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| get | /v1/m/models/owned-models/{id} | models:registry:read | Bearer token | models module route (requires models:registry:read) |
| put | /v1/m/models/owned-models/{id} | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| delete | /v1/m/models/owned-models/{id} | models:registry:write | Bearer token | models module route (requires models:registry:write) |
| get | /v1/m/models/owned-models/{id}/aibom | models:registry:read | Bearer token | Returns the live AI bill of materials for an owned model (read-only export, not sealed). |
| post | /v1/m/models/owned-models/{id}/aibom | models:registry:write | Bearer token | Generates the AIBOM, computes its canonical content hash, anchors the current audit-chain head, persists an append-only models.aibom seal record and self-audits the seal as the next ledger event — making the AIBOM tamper-evident compliance evidence (the same pattern as compliance's evidence package). |
| get | /v1/m/models/owned-models/{id}/model-card | models:registry:read | Bearer token | Returns the generated model card for an owned model (read-only export from the live inventory; read-tier, not audited — observer effect, exactly like the AIBOM generate route). |
| get | /v1/m/models/platforms | models:platforms:read | Bearer token | Returns the declared platforms reference. |
| get | /v1/m/models/rate-limits | models:ratelimits:read | Bearer token | Returns the read-only rate-limit inventory. |
| get | /v1/m/models/routing-policies | models:routing:read | Bearer token | Lists routing policies. |
| post | /v1/m/models/routing-policies | models:routing:write | Bearer token | Creates a routing policy. |
| get | /v1/m/models/routing-policies/{id} | models:routing:read | Bearer token | Returns one routing policy. |
| put | /v1/m/models/routing-policies/{id} | models:routing:write | Bearer token | Updates a routing policy in place. |
| delete | /v1/m/models/routing-policies/{id} | models:routing:write | Bearer token | Deletes a routing policy. |
| post | /v1/m/models/routing-policies/{id}/execute | models:routing:admin | Bearer token | Resolves a stored routing policy AND executes the resolved target chain through the governed Executor, emitting the result's CostSample. |
| post | /v1/m/models/routing-policies/{id}/resolve | models:routing:read | Bearer token | Resolves a stored routing policy against the governed estate and returns the routing decision. |
| get | /v1/m/models/tool-types | models:catalog:read | Bearer token | Returns the declared dated Anthropic tool-type catalog. |
| get | /v1/m/models/workspace-residency | models:keys:read | Bearer token | Lists the persisted per-workspace residency references, optionally filtered by workspace_ref. |
| put | /v1/m/models/workspace-residency | models:keys:write | Bearer token | Records (or replaces) one workspace's residency reference. |