Beta module namespace
sourcescope
Beta routes may change with notice and are NOT covered by the 24-month stable window of the core contract.
Every module route is enumerated with method, path, auth and required permission; request/response schemas are not published for the beta surface.
24 operations
| Method | Path | Required permission | Authentication | Summary |
|---|---|---|---|---|
| get | /v1/m/sourcescope/assignments | sourcescope:assignment:read | Bearer token | Lists connector→workspace assignments, optionally filtered by ?connector_name / ?workspace_ref. |
| post | /v1/m/sourcescope/assignments | sourcescope:assignment:write | Bearer token | Assigns a global connector to a workspace. |
| get | /v1/m/sourcescope/assignments/{id} | sourcescope:assignment:read | Bearer token | Returns one assignment. |
| put | /v1/m/sourcescope/assignments/{id} | sourcescope:assignment:write | Bearer token | Updates an assignment (enabled, note). |
| delete | /v1/m/sourcescope/assignments/{id} | sourcescope:assignment:write | Bearer token | Removes a connector→workspace assignment. |
| get | /v1/m/sourcescope/bindings | sourcescope:binding:read | Bearer token | Lists the tenant's source→scope bindings, optionally filtered by ?source_type / ?source_ref / ?scope_tree. |
| post | /v1/m/sourcescope/bindings | sourcescope:binding:write | Bearer token | Binds a connected source to a workspace/agent-group, recording a self-audit attributed to the real principal. |
| get | /v1/m/sourcescope/bindings/{id} | sourcescope:binding:read | Bearer token | Returns one binding. |
| put | /v1/m/sourcescope/bindings/{id} | sourcescope:binding:write | Bearer token | Updates a binding in place (scope, credential reference, enabled, note). |
| delete | /v1/m/sourcescope/bindings/{id} | sourcescope:binding:write | Bearer token | Removes a binding (the source reverts to global/unbound, or to any remaining bindings). |
| get | /v1/m/sourcescope/guard-postures | sourcescope:binding:read | Bearer token | Lists active guard-posture overrides. |
| put | /v1/m/sourcescope/guard-postures | sourcescope:binding:write | Bearer token | sourcescope module route (requires sourcescope:binding:write) |
| get | /v1/m/sourcescope/posture-requests | sourcescope:binding:read | Bearer token | Lists posture-change requests, optionally filtered by ?status / ?source_type / ?source_ref (default surfaces the pending queue for reviewers). |
| get | /v1/m/sourcescope/posture-requests/{id} | sourcescope:binding:read | Bearer token | Returns one posture-change request. |
| post | /v1/m/sourcescope/posture-requests/{id}/approve | sourcescope:posture:admin | Bearer token | sourcescope module route (requires sourcescope:posture:admin) |
| post | /v1/m/sourcescope/posture-requests/{id}/reject | sourcescope:posture:admin | Bearer token | Rejects a pending relaxation (no change applied). |
| get | /v1/m/sourcescope/resolve | sourcescope:binding:read | Bearer token | Answers "what would the runtime resolver decide for this actor and source" — the console's binding-effect preview. |
| get | /v1/m/sourcescope/resources | sourcescope:binding:read | Bearer token | sourcescope module route (requires sourcescope:binding:read) |
| post | /v1/m/sourcescope/sources/disable-scoping | sourcescope:binding:write | Bearer token | Proposes disabling ALL scoping for a source (it becomes global). |
| get | /v1/m/sourcescope/workspace-connectors | sourcescope:workspace_connector:read | Bearer token | Lists workspace-scoped connectors, optionally filtered by ?workspace_ref / ?kind. |
| post | /v1/m/sourcescope/workspace-connectors | sourcescope:workspace_connector:write | Bearer token | Creates a workspace-scoped connector. |
| get | /v1/m/sourcescope/workspace-connectors/{id} | sourcescope:workspace_connector:read | Bearer token | Returns one workspace connector. |
| put | /v1/m/sourcescope/workspace-connectors/{id} | sourcescope:workspace_connector:write | Bearer token | Updates a workspace connector. |
| delete | /v1/m/sourcescope/workspace-connectors/{id} | sourcescope:workspace_connector:write | Bearer token | Removes a workspace connector and cascade-deletes its workspace-owned sealed secrets. |