Organization

The org surface behind embedded agents: everything a tenant's backend needs to run a fleet of customer workspaces. All endpoints require an org API key or an admin member session; workspace-scoped keys are refused.

Org & workspaces

• GET /api/v1/org — the calling org.
• GET /api/v1/org/workspaces — list the org's workspaces.
• POST /api/v1/org/workspaces — provision a headless workspace.
• POST /api/v1/org/workspaces/{workspace_id}/lifecycle — suspend or reactivate a workspace.
• GET /api/v1/org/usage — pooled credit and per-workspace spend.

API keys

• POST /api/v1/org/api-keys — create an org key (value shown once).
• GET /api/v1/org/api-keys — list keys.
• DELETE /api/v1/org/api-keys/{key_id} — revoke a key.

Agents

• GET /api/v1/org/agents — the org's agent registry.
• POST /api/v1/org/agents/{slug}/versions — publish a version from a source archive.
• POST /api/v1/org/agents/{slug}/promote — snapshot a workspace agent into the registry.

Integrations

• PUT /api/v1/org/workspaces/{workspace_id}/integrations/{provider} — push or rotate credentials.
• GET /api/v1/org/workspaces/{workspace_id}/integrations — list with credential health.
• DELETE /api/v1/org/workspaces/{workspace_id}/integrations/{integration_id} — revoke and delete credentials.

Webhooks

• POST /api/v1/org/webhooks — register an endpoint (secret shown once).
• GET /api/v1/org/webhooks — list endpoints.
• DELETE /api/v1/org/webhooks/{endpoint_id} — deactivate an endpoint.
• GET /api/v1/org/webhooks/{endpoint_id}/deliveries — recent deliveries.
• POST /api/v1/org/webhooks/{endpoint_id}/deliveries/{delivery_id}/replay — re-send a delivery.

See the Embedded Agents guides for the workflows these endpoints compose into.