Skip to content

Overview

The REST surface of Yagra-core: inventory, metrics, alerts, passive events and configuration.

This document is generated from the Rust handlers — it is the contract, not a description of one.

Information

  • License: AGPL-3.0-only
  • OpenAPI version: 3.1.0

Either a session token from POST /api/v1/auth/login (short-lived; what the WebUI uses), or a personal access token (yat_…, Settings ▸ API tokens) whose surfaces include rest. A token issued for mcp only is refused here with 401. An API token acts as the account that owns it, so its role and its visibility scope are capped at that account’s current ones, and it stops working when the account is disabled or deleted; it cannot administer users, and endpoints that identify the signed-in account (/auth/me, the personal dashboard) answer 403 to it.

Security scheme type: http