---
title: "HTTP Route Reference"
description: "Sources: `docs/openapi.json`, `server/src/modules/security-kernel/generated/routeManifest.ts`, `docs/security-kernel-route-report.json`."
engineVersion: v1.0.234
date: 2026-09-28
license: "(c) Gessa, proprietary. Cite with attribution to https://gessa.ai/docs/. Terms: https://gessa.ai/terms/."
canonical: https://gessa.ai/docs/spec/generated/route-reference/
---
<!-- GENERATED FILE: do not edit by hand. -->
<!-- Regenerate with `npm run gen-docs`. -->

Sources: `docs/openapi.json`, `server/src/modules/security-kernel/generated/routeManifest.ts`, `docs/security-kernel-route-report.json`.

# HTTP Route Reference

This generated snapshot enumerates every HTTP operation in the OpenAPI snapshot (`docs/openapi.json`), joined by method and path to the per-route security posture in the typed route-security manifest (`ROUTE_SECURITY_MANIFEST` in `server/src/modules/security-kernel/generated/routeManifest.ts`). That manifest is the frozen output of the route policy engine in `server/src/modules/security-kernel/routePolicy.ts` and is the same source `docs/security-kernel-route-report.json` aggregates. Policy class is the route taxonomy; Rate limit names the category defined in `docs/spec/generated/rate-limits.md`.

An operation with no OpenAPI summary is emitted with the literal text "no summary" so the gap stays visible. The public player subset defined by `server/src/modules/security-kernel/routePolicy.ts` (guest admission and routes that accept the runtime player credential) is marked "player runtime" in the Auth posture column; that subset is read from the typed manifest fields, not recomputed from the policy engine.

Operation count: `1084`.
Operations with a summary: `20`.
Operations without a summary (emitted as "no summary"): `1064`.
Public operations: `136`.
Auth-required operations: `948`.
Public player runtime operations: `8`.
Operations without manifest posture: `0`.
Module count: `35`.
Security-kernel route manifest totals from `docs/security-kernel-route-report.json` (all transports): total `1514`, public `229`, auth-required `1285`.

## access

### POST /api/access/intake/exchange

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### POST /api/access/intake/finalize

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## admin

### GET /api/admin/access

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/asset-library/assets/{entryId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/asset-library/assets/{entryId}/delist

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/asset-library/assets/{entryId}/purge

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/asset-library/assets/{entryId}/review

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/asset-library/provider-commands

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/asset-library/provider-commands/{commandId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/asset-library/provider-commands/{commandId}/reconcile

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/asset-library/review-queue

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/asset-submissions/{entryId}/return-to-draft

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/auth/account-directory

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/auth/accounts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/auth/accounts/{accountId}/character-avatar/moderate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/auth/accounts/{accountId}/force-step-up

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### PATCH /api/admin/auth/accounts/{accountId}/roles

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/auth/accounts/{accountId}/security-timeline

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/admin/auth/accounts/{accountId}/status

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/auth/bootstrap-superadmin

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### GET /api/admin/auth/desktop-device-bindings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/auth/desktop-device-bindings/{deviceBindingId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/auth/mfa-factors

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/auth/mfa-factors/{factorId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/auth/security-alerts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/auth/security-alerts/deliver-pending

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/auth/security-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/auth/sessions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/auth/sessions/{sessionId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/auth/summary

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/billing/cost-panel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/billing/cost-panel/actions/credit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/billing/cost-panel/actions/grace-period

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/billing/cost-panel/actions/pause-public-traffic

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/billing/cost-panel/actions/quota-override

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/billing/cost-panel/actions/spend-cap

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/billing/cost-panel/workspaces/{workspaceId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/billing/launch-readiness

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/billing/periods

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/billing/periods/{periodId}/close-receipt

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/billing/periods/{periodId}/export-batches

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/billing/reconciliation

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/changelog/entries

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/changelog/entries

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/changelog/entries/{id}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/admin/changelog/entries/{id}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/changelog/entries/{id}/archive

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/changelog/entries/{id}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/changelog/entries/{id}/publish

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/changelog/entries/{id}/readership

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/data-authority/activity

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/data-authority/activity/summary

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/data-authority/games/{gameId}/recovery-snapshots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/data-authority/games/{gameId}/recovery-snapshots/{snapshotId}/restore

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/data-authority/games/{gameId}/recovery-snapshots/{snapshotId}/rollback

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/data-authority/games/{gameId}/recovery-timeline

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/data-authority/slos

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/directory/games

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/directory/organizations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/directory/workspaces

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/engagement/dau-mau

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/engagement/retention

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/feedback/reports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/feedback/reports/{reportId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/feedback/reports/{reportId}/attachments/{attachmentId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/feedback/reports/{reportId}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/feedback/reports/{reportId}/notes

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### PATCH /api/admin/feedback/reports/{reportId}/status

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/generation/audit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/generation/batches

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/generation/capabilities

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/admin/generation/capabilities/status

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/generation/cost-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/health

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/jobs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/jobs/{jobId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### POST /api/admin/generation/jobs/{jobId}/repair

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `security_admin_write` | no summary |

### GET /api/admin/generation/operation-graph

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/overview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/pools

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/pools/{poolKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/admin/generation/pools/{poolKey}/controls

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/generation/pools/{poolKey}/drain

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/generation/pools/{poolKey}/pause

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/generation/pools/{poolKey}/resume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/generation/provider-bindings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/admin/generation/provider-bindings/{providerBindingKey}/status

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/generation/rate-limits

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/reconciliation

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/generation/trove/runs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/generation/trove/runs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/generation/trove/schedules

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/generation/trove/schedules

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### PATCH /api/admin/generation/trove/schedules/{scheduleId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/generation/usage

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/live

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/marketplace/listings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/notifications/broadcasts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/notifications/deliveries

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/notifications/deliveries/{deliveryId}/retry

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/notifications/intents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/referrals/attributions/{attributionId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/referrals/attributions/{attributionId}/manual-qualify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/referrals/attributions/{attributionId}/void

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/referrals/programs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/referrals/programs/{programId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/referrals/reward-grants/{rewardGrantId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/referrals/reward-grants/{rewardGrantId}/retry

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/security/api-keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_read` | no summary |

### POST /api/admin/security/api-keys/{apiKeyId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_write` | no summary |

### GET /api/admin/security/capability-tokens

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_read` | no summary |

### POST /api/admin/security/capability-tokens/{capabilityTokenId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_write` | no summary |

### GET /api/admin/security/dual-control/approvals

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/security/dual-control/approvals/{approvalId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/security/dual-control/approvals/{approvalId}/approve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/security/dual-control/approvals/{approvalId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/security/dual-control/approvals/{approvalId}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/security/dual-control/approvals/{approvalId}/reconcile

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/security/dual-control/approvals/{approvalId}/reject

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/security/forced-step-up

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/admin/security/forced-step-up/{scopeType}/{scopeId}/{actionClass}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/security/incidents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/security/incidents/export

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/security/quarantines

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/admin/security/quarantines/{scopeType}/{scopeId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/usage/business-series

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/by-event-type

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/by-workspace

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/cost-rates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/admin/usage/cost-rates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/admin/usage/creation-funnel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/data-quality

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/first-seen-cohorts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/overview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/plays

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/raw-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/referrers

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/week-over-week

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/usage/world-outcomes

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/admin/versioning-v1/release-operations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | List signed releases, runtime health, lifecycle history, defaults, and rollback lineage |

### POST /api/admin/versioning-v1/releases

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | Verify and install an attested immutable versioning release bundle |

### POST /api/admin/versioning-v1/releases/{releaseBundleId}/default

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | Append an evidence-bound dual-control platform default or rollback decision |

### POST /api/admin/versioning-v1/releases/{releaseBundleId}/lifecycle

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | Append an evidence-bound dual-control release lifecycle transition |

### GET /api/admin/versioning-v1/runtime-targets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | List immutable runtime target registrations and their latest observations |

### POST /api/admin/versioning-v1/runtime-targets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | Register an immutable runtime target identity for a release bundle |

### POST /api/admin/world-publications/{publicationId}/block

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/world-publications/{publicationId}/projection-effects

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/world-publications/{publicationId}/projection-effects/{effectId}/replay

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/world-publications/{publicationId}/unblock

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/admin/world-publications/{publicationId}/withdraw

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

## agent-onboarding

### POST /api/agent-onboarding

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### POST /api/agent-onboarding/claim

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/agent-onboarding/claim/preview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## ai

### POST /api/ai/chat/runs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/conversations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/ai/conversations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/conversations/{conversationId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/ai/conversations/{conversationId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/ai/conversations/{conversationId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/conversations/{conversationId}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/ai/conversations/{conversationId}/export

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/ai/conversations/{conversationId}/fork

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/conversations/{conversationId}/permission-audit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/ai/conversations/{conversationId}/permission-mode

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/conversations/{conversationId}/renderer-proof-media/{gameId}/{contentHash}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/ai/conversations/{conversationId}/steer

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/models

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/ai/oneshot

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/ai/oneshot/stream

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/runs/{runId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/ai/runs/{runId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/ai/runs/{runId}/frame-observations/{requestId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/ai/runs/{runId}/pause

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/ai/runs/{runId}/resume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/surfaces/{surface}/policy

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/ai/tool-approvals/{approvalId}/decide

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/ai/usage

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/ai/workspace-config

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/ai/workspace-config

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## app

### GET /api/app/bootstrap

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/app/creator-receipts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/app/projects/summary

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/app/workspaces/summary

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/app/worlds/liveness

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## app-entry

### POST /api/app-entry

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### POST /api/app-entry/acknowledge

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/app-entry/consume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## asset-library

### GET /api/asset-library/admin/review/entries/{entryId}/versions/{versionId}/artifacts/{artifactId}/content

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/asset-library/v1/assets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/asset-library/v1/assets/{assetIdOrSlug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/asset-library/v1/assets/{assetIdOrSlug}/artifacts/{artifactId}/content

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/asset-library/v1/assets/{assetIdOrSlug}/import

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/asset-library/v1/assets/{assetIdOrSlug}/import-and-link

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/asset-library/v1/assets/{assetIdOrSlug}/reports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/asset-library/v1/submissions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/asset-library/v1/submissions/{entryId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/asset-library/v1/submissions/{entryId}/submit-review

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/asset-library/v1/submissions/{entryId}/withdraw

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## audit

### GET /api/audit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_read` | no summary |

## auth

### GET /api/auth/account

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### DELETE /api/auth/account

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/auth/account/app-shell-mode

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/auth/account/appearance

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/auth/account/avatar

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/auth/account/character-avatar

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/auth/account/character-avatar

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/auth/account/export

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/auth/account/handle

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/auth/account/handle/availability

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/auth/account/input

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/auth/account/language

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/auth/account/post-onboarding-tutorial

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/auth/account/setup

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/auth/account/sidebar

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/auth/account/unlocks/redeem

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/auth/account/workbench

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/auth/admin-mode/enter

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/auth/admin-mode/exit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/auth/api-key/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### POST /api/auth/capability-token/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### POST /api/auth/client-errors

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/auth/config

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/auth/continuations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### POST /api/auth/continuations/finalize

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/auth/csrf

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### DELETE /api/auth/desktop-device-bindings/{deviceBindingId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/desktop/code

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/desktop/exchange

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `auth_challenge` | no summary |

### POST /api/auth/desktop/native-attestation/challenges

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/desktop/native-attestation/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### GET /api/auth/desktop/session

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/guest/convert

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/auth/guest/start

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public (player runtime) | `anonymous_admission` | `guest_admission` | no summary |

### GET /api/auth/hero

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/auth/login-challenge

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `auth_challenge` | no summary |

### POST /api/auth/logout

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### POST /api/auth/mfa/challenge/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `auth_challenge` | no summary |

### GET /api/auth/mfa/factors

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### DELETE /api/auth/mfa/factors/{factorId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/mfa/recovery-codes/rotate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/mfa/totp/start

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/mfa/totp/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### GET /api/auth/oauth/{provider}/callback

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `auth_challenge` | no summary |

### POST /api/auth/oauth/{provider}/callback

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `auth_challenge` | no summary |

### GET /api/auth/oauth/{provider}/start

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `auth_challenge` | no summary |

### POST /api/auth/otp/send

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `auth_challenge` | no summary |

### POST /api/auth/otp/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `auth_challenge` | no summary |

### POST /api/auth/passkeys/authentication/start

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `auth_challenge` | no summary |

### POST /api/auth/passkeys/authentication/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `auth_challenge` | no summary |

### POST /api/auth/passkeys/register/start

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/passkeys/register/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/policy/explain

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/auth/principal

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/auth/route-actions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_read` | no summary |

### GET /api/auth/route-policy

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_read` | no summary |

### GET /api/auth/security-kernel/route-manifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_read` | no summary |

### GET /api/auth/security-kernel/shadow-decisions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_read` | no summary |

### GET /api/auth/security-state

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/auth/session/refresh

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### GET /api/auth/sessions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### DELETE /api/auth/sessions/{sessionId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/auth/sessions/revoke-others

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/auth/step-up/start

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/step-up/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `auth_challenge` | no summary |

### POST /api/auth/terms/accept

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## billing

### POST /api/billing/stripe/webhook

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `provider_signed` | `provider_callback` | no summary |

## capabilities

### GET /api/capabilities

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/capabilities/{key}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## changelog

### GET /api/changelog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

## deployments

### GET /api/deployments/{deploymentId}/assets/manifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required (player runtime) | `asset_delivery` | `asset_delivery` | no summary |

### GET /api/deployments/{deploymentId}/client-publish-records

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/deployments/{deploymentId}/client-publish-records

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/deployments/{deploymentId}/health

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/deployments/{deploymentId}/health/check

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/deployments/{deploymentId}/observability/network-health

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/deployments/{deploymentId}/runtime-config

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

## desktop

### POST /api/desktop/telemetry

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## domain-routes

### POST /api/domain-routes/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## email

### POST /api/email/provider/ses/feedback

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `provider_signed` | `provider_callback` | no summary |

### GET /api/email/unsubscribe

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/email/unsubscribe

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

## engine

### GET /api/engine/releases

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/engine/version

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

## feedback

### POST /api/feedback/reports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/feedback/reports/{reportId}/attachments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## games

### GET /api/games/{gameId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/admission

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/asset-authoring/sessions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-authoring/sessions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-authoring/sessions/{sessionId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-authoring/sessions/{sessionId}/abandon

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-authoring/sessions/{sessionId}/checkpoints

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-authoring/sessions/{sessionId}/checkpoints

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-authoring/sessions/{sessionId}/checkpoints/{checkpointId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-authoring/sessions/{sessionId}/commit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-authoring/sessions/{sessionId}/material/commit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-authoring/sessions/{sessionId}/operations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-authoring/sessions/{sessionId}/operations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/complete-upload

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/extract-subassets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-pipeline/{assetId}/model-material-slots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/optimization-jobs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/optimize

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/promote-material-slot

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/promote-material-slots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-pipeline/{assetId}/subassets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/unextract-subassets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/{assetId}/validate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-pipeline/budget-profiles

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/games/{gameId}/asset-pipeline/budget-profiles/{profileKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-pipeline/budget-report

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/asset-pipeline/manifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/asset-pipeline/model-material-slot-overrides

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/optimization-jobs/{jobId}/run

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/promote-manifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/asset-pipeline/upload-intents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/asset-usage

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/assets/delivery/{assetId}/{variantKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public (player runtime) | `asset_delivery` | `asset_delivery` | no summary |

### GET /api/games/{gameId}/assets/delivery/manifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required (player runtime) | `asset_delivery` | `asset_delivery` | no summary |

### GET /api/games/{gameId}/capability-grants

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/capability-grants

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/capability-grants/{grantId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/collaboration/chat/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/collaboration/chat/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/commands

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/commands/receipts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/commands/receipts/{idOrCommandId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/commerce/catalog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/commerce/earnings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/commerce/grants

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/commerce/offers

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/commerce/offers/{offerKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/games/{gameId}/commerce/offers/{offerKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/commerce/purchases

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/commerce/purchases

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/commerce/purchases/{purchaseId}/refund

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/content-versions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/creation/resume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/currency-ledger

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/data-warehouse/erasure

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/data-warehouse/lists/{listId}/records

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/data-warehouse/lists/{listId}/records/{recordId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/data-warehouse/lists/{listId}/records/{recordId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/data-warehouse/lists/{listId}/records/{recordId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/data-warehouse/lists/{listKey}/owners/{ownerType}/{ownerId}/records/{recordKey}/restore

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/data-warehouse/lists/{listKey}/owners/{ownerType}/{ownerId}/records/{recordKey}/undelete

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/data-warehouse/lists/{listKey}/owners/{ownerType}/{ownerId}/records/{recordKey}/versions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/data-warehouse/lists/{listKey}/restore

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/data-warehouse/lists/{listKey}/snapshots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/data-warehouse/lists/{listKey}/snapshots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/data-warehouse/query

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/data-warehouse/recovery-snapshots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/data-warehouse/schema-changes/apply

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/data-warehouse/schema-changes/preview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/data-warehouse/sessions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/data-warehouse/sessions/{sessionId}/timeline

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/data-warehouse/snapshot

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/deployment-health

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/deployment-tier-caps

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/deployments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/deployments/{deploymentId}/drain

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/deployments/{deploymentId}/expire

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/deployments/{deploymentId}/metrics

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/distribution-policy

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/distribution-policy

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/document/cutover

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/document/cutover

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/document/hash

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/document/legacy-hash

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/document/records/{recordId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/document/versions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/document/versions/{seq}/name

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/document/versions/{seq}/restore-plan

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/domain-route-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/domain-routes

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/domain-routes

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/domain-routes/{routeIdOrHost}/provision

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/domain-routes/{routeIdOrHost}/provision/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/domain-routes/{routeIdOrHost}/provision/run

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/email/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/email/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/email/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/email/preferences

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/email/preferences

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/email/sender-profiles

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/email/sender-profiles

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/email/sending-domains

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/email/sending-domains

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/email/sending-domains/{domainIdOrName}/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/email/suppressions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/email/suppressions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/email/suppressions/{suppressionId}/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/email/template-partials

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/email/templates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/email/templates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/email/templates/{templateIdOrKey}/preview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/engine/migrations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/entitlements

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/environment-ops

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/environment-ops/promote

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/environments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/environments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/events/{eventId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/graphics-default

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/integrations/api-keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_read` | no summary |

### POST /api/games/{gameId}/integrations/api-keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### DELETE /api/games/{gameId}/integrations/api-keys/{apiKeyId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### POST /api/games/{gameId}/integrations/api-keys/{apiKeyId}/rotate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### GET /api/games/{gameId}/integrations/secrets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/integrations/secrets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/integrations/webhook-deliveries

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/integrations/webhook-deliveries/claim

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/integrations/webhooks

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/integrations/webhooks

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/integrations/webhooks/{webhookId}/deliveries

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/inventory-ledger

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/invitations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/invitations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/invitations/{invitationId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/invitations/{invitationId}/accept

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/invitations/{invitationId}/resend

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/live/admin-actions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/live/admin/ban

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/games/{gameId}/live/admin/bans

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/live/admin/close-room

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/games/{gameId}/live/admin/kick

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/games/{gameId}/live/admin/message

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/games/{gameId}/live/admin/restart-room

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/games/{gameId}/live/admin/unban

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/games/{gameId}/live/analytics

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/anomalies

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/live/anomalies/{anomalyId}/acknowledge

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/live/anomalies/{anomalyId}/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/live/cost

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/deployments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/live/deployments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/live/deployments/{deploymentId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/live/deployments/{deploymentId}/drain

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/live/deployments/{deploymentId}/expire

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/live/netcode

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/overview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/players

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/players/{playerId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/commands

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/connections

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/entities

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/entities/{id}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/players

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/replication

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/live/rooms/{roomId}/snapshots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/loading-screen

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### PUT /api/games/{gameId}/loading-screen

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/loading-screen

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/marketplace/analytics

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/marketplace/featured-slots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/games/{gameId}/marketplace/featured-slots/{slotKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/marketplace/listings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/marketplace/listings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/marketplace/listings/{listingIdOrSlug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/marketplace/listings/{listingIdOrSlug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/marketplace/listings/{listingIdOrSlug}/delist

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/marketplace/listings/{listingIdOrSlug}/review

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/marketplace/listings/{listingIdOrSlug}/submit-review

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/marketplace/moderation-reports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/marketplace/moderation-reports/{reportId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/members

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/members

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/games/{gameId}/members/{accountId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/members/{accountId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/games/{gameId}/multiplayer-default

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/observability/health-checks

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/observability/health-checks

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/observability/live-ops

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/observability/renderer-backend-fleet

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/observability/signals

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/observability/signals

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/observability/support-trace

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/observability/timeline

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/open-activity

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/operational-control-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/operational-controls

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/games/{gameId}/operational-controls/{key}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/play-slug

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/games/{gameId}/play-slug

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/play-slug/{slug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/players/{playerId}/currencies

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/players/{playerId}/currencies/delta

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/players/{playerId}/inventory

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/players/{playerId}/inventory/delta

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/prices

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/primitive-requests

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/primitive-requests

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/games/{gameId}/primitive-requests/{requestId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/products

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/products

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/products/{productId}/prices

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/programs/delivery/{scriptId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public (player runtime) | `asset_delivery` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/assets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/assets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/assets/{assetId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/assets/{assetId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/assets/{assetId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/assets/{assetId}/deletion-plan

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/assets/{assetId}/dependencies

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/assets/{assetId}/dependents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/assets/{assetId}/duplicate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/assets/{assetId}/material/patches/apply

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/assets/{assetId}/model-document

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/assets/{assetId}/terrain/artifacts/build

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/assets/{assetId}/terrain/patches/apply

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/authoring/component-catalog/v2

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/component-catalog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/component-instances/authoring-receipts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/components

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/components

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/components/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/components/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/components/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/entities

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/entities

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/entities/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/entities/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/entities/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/entities/{idOrKey}/authoring-context/v2

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/entities/{idOrKey}/component-overrides/{componentKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PUT /api/games/{gameId}/project/entities/{idOrKey}/components/{componentKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/games/{gameId}/project/entities/{idOrKey}/components/{componentKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/entities/{idOrKey}/components/{componentKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/entities/{idOrKey}/components/{componentKey}/prepare-resource

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/entities/{idOrKey}/components/{componentKey}/upgrade

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/entities/{idOrKey}/components/{componentKey}/wire-script-event

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/entities/move-to-folder

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/entity-folders

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/entity-folders

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/games/{gameId}/project/entity-folders/{folderId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/entity-folders/{folderId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/prefabs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/prefabs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/prefabs/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/prefabs/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/prefabs/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/prefabs/{idOrKey}/merge

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/prefabs/save-from-entities

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/resource-folders

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/resource-folders

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/games/{gameId}/project/resource-folders/{folderId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/resource-folders/{folderId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/resource-locks/{resourceKind}/{resourceId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### DELETE /api/games/{gameId}/project/resource-locks/{resourceKind}/{resourceId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/resource-locks/{resourceKind}/{resourceId}/acquire

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/resource-locks/{resourceKind}/{resourceId}/renew

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/resource-locks/{resourceKind}/{resourceId}/steal

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/resources/{resourceKind}/{resourceId}/deletion-plan

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/resources/deletion-plan

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/resources/move-to-folder

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/scripts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/scripts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/scripts/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/scripts/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/scripts/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/scripts/{idOrKey}/patches/apply

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/transactions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/ui-binding-catalog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/ui-catalog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/project/ui-panels

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/ui-panels

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/ui-panels/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/ui-panels/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/ui-panels/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/worlds

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/project/worlds

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/project/worlds/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/project/worlds/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/project/worlds/{idOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/worlds/{idOrKey}/set-start

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/project/worlds/{idOrKey}/visual-profile/apply

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/projections

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/projections/{projectionKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/publish/dev

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/replay/{replayId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/revenue-ledger

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/revenue-ledger/adjustments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/revenue-report

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/admin/rooms/{roomId}/connections/{connectionId}/debug

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/admin/rooms/{roomId}/debug

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/admin/rooms/{roomId}/dump-room-state

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/admin/rooms/{roomId}/fanout-buffer

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/admin/rooms/{roomId}/historical-buffer

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/admin/rooms/{roomId}/interest-graph

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/admin/rooms/{roomId}/rejection-log

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/admissions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required (player runtime) | `browser_session` | `authenticated_mutation` | Issue a short-lived principal-bound ticket for the exact active runtime target |

### POST /api/games/{gameId}/runtime/component-verbs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/component-verbs/seed-offerings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/deployments/{deploymentId}/queues/{queueKey}/admission

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/editor-simulations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/incidents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/incidents/{incidentId}/status

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/leases

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/leases/{leaseId}/release

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/leases/acquire

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/live-ops

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/load-tests

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/load-tests

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/load-tests/{runId}/stop

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/logs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/matches

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/matches

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/matches/{matchId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/matches/{matchId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/matches/{matchId}/lifecycle

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/matches/{matchId}/lifecycle/transition

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/matches/{matchId}/objectives

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/matches/{matchId}/objectives/{objectiveKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/matches/{matchId}/participants

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/matches/{matchId}/scoreboards

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/matches/{matchId}/scoreboards/{scoreKey}/add

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/matches/{matchId}/spawns

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/matches/{matchId}/spawns

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/metrics

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/multiplayer-blueprints

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/multiplayer-blueprints

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/multiplayer-blueprints/{blueprintId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/observability/signals

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required (player runtime) | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/parties

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/parties

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/parties/{partyId}/invites

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/parties/{partyId}/leave

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/parties/{partyId}/members

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/parties/{partyId}/members

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/parties/{partyId}/members/{memberId}/kick

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/party-members

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/placement-decisions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/play-sessions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required (player runtime) | `browser_session` | `authenticated_mutation` | no summary |

### OPTIONS /api/games/{gameId}/runtime/play-sessions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/player-state

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/queue-admissions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/queue-tickets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/queue-tickets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/queue-tickets/{ticketId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/queue-tickets/{ticketId}/readiness

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/readiness

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/reference-blueprints

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/replay-captures

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/replay-captures/{captureId}/export

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/replays/{artifactId}/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/rooms

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/admin-observers

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/ai-actors

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}/commands

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/commands

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}/connections

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/drain

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/join

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}/players

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/players/{playerSessionId}/kick

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/replay-captures

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}/replay-window

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}/replication

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/rooms/{roomId}/shutdown

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/rooms/{roomId}/snapshots

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/sdk-manifests

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/runtime/servers/instances

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/servers/instances

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/servers/instances/{instanceId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/servers/instances/{instanceId}/drain

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/runtime/servers/instances/{instanceId}/heartbeat

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/runtime/servers/pools

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/runtime/servers/pools

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/scripts/host-functions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/scripts/publish-gate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/scripts/run-fixture

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/scripts/sandbox-policy

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/scripts/sandbox-test

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/scripts/sdk

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/scripts/typecheck

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/scripts/typecheck-fixture

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/simulations/run

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/simulations/runs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/simulations/runs/{runId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/spatial-assets/{assetId}/annotations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/spatial-assets/{assetId}/build-world

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/spatial-assets/{assetId}/proxy-jobs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/spatial-assets/import-jobs/{jobId}/run

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/spatial-assets/imports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/spatial-assets/proxy-jobs/{jobId}/run

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/support/incidents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/support/incidents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/support/incidents/{incidentId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/support/incidents/{incidentId}/actions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/support/incidents/{incidentId}/notes

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/games/{gameId}/support/incidents/{incidentId}/status

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/support/incidents/{incidentId}/timeline

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/test-purchases

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/thumbnail

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### PUT /api/games/{gameId}/thumbnail

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/games/{gameId}/thumbnail

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/toolbox/material

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/toolbox/place

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/workbench/layout

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/games/{gameId}/workbench/layout

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/workbench/layout/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/workbench/surfaces

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/workflows/{idOrKey}/runs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/workflows/runs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/games/{gameId}/workflows/runs/{runId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/workflows/runs/{runId}/approvals/{approvalId}/decision

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/workflows/runs/{runId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/workflows/runs/{runId}/resume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/workflows/runs/{runId}/retry-step

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/world-publication

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/world-publication

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/world-publication/cover

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/games/{gameId}/world-publication/operations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/games/{gameId}/world-publication/operations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/world-publication/publish

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/world-publication/runtime-qualification

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/games/{gameId}/worlds/{idOrKey}/cascade-delete-chunked

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## generation

### GET /api/generation/asset-pack-batches

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/generation/asset-pack-batches/{batchId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/generation/asset-pack-batches/{batchId}/final-generation

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/generation/asset-pack-batches/{batchId}/items/{itemId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/generation/asset-pack-batches/{batchId}/review

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/generation/asset-pack-batches/preview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/generation/capabilities

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/generation/jobs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/generation/jobs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/generation/jobs/{jobId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### GET /api/generation/jobs/{jobId}/artifacts/{artifactId}/content

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### POST /api/generation/jobs/{jobId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### GET /api/generation/jobs/{jobId}/draft

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### GET /api/generation/jobs/{jobId}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### GET /api/generation/jobs/{jobId}/events/stream

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### POST /api/generation/jobs/{jobId}/exports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/generation/quote

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/generation/worker/claim

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/generation/worker/heartbeat

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/generation/worker/jobs/{jobId}/complete

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/generation/worker/jobs/{jobId}/fail

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/generation/worker/jobs/{jobId}/heartbeat

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/generation/worker/jobs/{jobId}/lighting-input

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### GET /api/generation/worker/jobs/{jobId}/lighting-input/files/{digest}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### POST /api/generation/worker/jobs/{jobId}/progress

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### GET /api/generation/worker/jobs/{jobId}/references/{referenceIndex}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

## gessabench

### GET /api/gessabench/v0/leaderboard

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/gessabench/v0/releases/current

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/gessabench/v0/replays/{replayId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/gessabench/v0/replays/{replayId}/frames/{tick}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/gessabench/v0/tasks

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/gessabench/v0/tasks/{taskId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## integrations

### POST /api/integrations/webhook-deliveries/{deliveryId}/delivered

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/integrations/webhook-deliveries/{deliveryId}/failed

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/integrations/webhook-deliveries/{deliveryId}/provider-send

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## marketplace

### GET /api/marketplace/discover

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/marketplace/listings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/marketplace/listings/{listingIdOrSlug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/marketplace/listings/{listingIdOrSlug}/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### GET /api/marketplace/listings/{listingIdOrSlug}/ratings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/marketplace/listings/{listingIdOrSlug}/ratings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/marketplace/listings/{listingIdOrSlug}/reports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/marketplace/listings/{listingIdOrSlug}/share-kit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

## notifications

### GET /api/notifications

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/notifications/{notificationId}/archive

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/notifications/{notificationId}/read

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/notifications/preferences

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/notifications/preferences

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/notifications/read-all

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/notifications/summary

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## orgs

### GET /api/orgs/{organizationId}/api-keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_read` | no summary |

### POST /api/orgs/{organizationId}/api-keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### PATCH /api/orgs/{organizationId}/api-keys/{apiKeyId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### POST /api/orgs/{organizationId}/billing/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/billing/checkout

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/checkout-attempts/{attemptId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/orgs/{organizationId}/billing/credit-reservations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/credit-reservations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/billing/credit-reservations/{reservationId}/commit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/billing/credit-reservations/{reservationId}/refund

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/billing/credit-reservations/{reservationId}/release

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/credits

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/credits

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### POST /api/orgs/{organizationId}/billing/credits/checkout

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/credits/summary

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/events/{eventId}/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/feature-gates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/feature-gates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/invoices

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/invoices/generate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/plan-assignments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/plan-assignments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/plans

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/plans

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/portal

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/portal

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/billing/resume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/billing/usage-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/billing/usage-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/capability-tokens

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_read` | no summary |

### POST /api/orgs/{organizationId}/capability-tokens

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### PATCH /api/orgs/{organizationId}/capability-tokens/{capabilityTokenId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### GET /api/orgs/{organizationId}/developer/keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/developer/keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/education-discount

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/education-discount/verifications

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/education-discount/verifications/{verificationId}/confirm

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/email/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/email/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/email/preferences

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/email/templates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/email/templates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/email/templates/{templateIdOrKey}/preview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/entitlements

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/entitlements/consume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/entitlements/v2/check

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/entitlements/v2/consume

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/orgs/{organizationId}/policy/explain

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/referrals/claim

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/referrals/me

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/orgs/{organizationId}/referrals/rewards

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/orgs/{organizationId}/role-assignments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/role-assignments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/orgs/{organizationId}/role-assignments/{roleAssignmentId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/orgs/{organizationId}/security-grants

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/orgs/{organizationId}/service-accounts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_admin_read` | no summary |

### POST /api/orgs/{organizationId}/service-accounts

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### PATCH /api/orgs/{organizationId}/service-accounts/{serviceAccountId}/disable

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `machine_credential` | `security_mutation` | no summary |

### GET /api/orgs/{organizationId}/usage-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/orgs/{organizationId}/usage-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## platform

### GET /api/platform/catalog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/platform/catalog/context-packet

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/platform/catalog/discovery-packets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/platform/email/global-bounces/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/global-complaints/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/platform/email/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/platform/email/messages

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/messages/{messageId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/messages/{messageId}/fail

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/messages/{messageId}/provider-send

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/messages/{messageId}/redrive

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/messages/claim

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/messages/send-immediate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/privacy-erasure

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/platform/email/sender-profiles

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/platform/email/sender-profiles

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/platform/email/suppressions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/platform/email/suppressions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/suppressions/{suppressionId}/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/template-partials

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/platform/email/templates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/platform/email/templates

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/platform/email/templates/{templateIdOrKey}/preview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/platform/email/types

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/platform/email/types

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/platform/jobs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/platform/jobs

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/platform/jobs/{jobId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### POST /api/platform/jobs/{jobId}/cancel

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/platform/jobs/{jobId}/complete

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/platform/jobs/{jobId}/fail

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/platform/jobs/{jobId}/provider-dispatch

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/platform/jobs/{jobId}/retry

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### POST /api/platform/jobs/claim

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### GET /api/platform/jobs/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### GET /api/platform/jobs/heartbeats

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_read` | no summary |

### POST /api/platform/jobs/heartbeats

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `internal_job` | `authenticated_mutation` | no summary |

### GET /api/platform/operational-control-events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/platform/operational-controls

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/platform/operational-controls/{key}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_write` | no summary |

### GET /api/platform/primitives

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/platform/primitives/{primitiveId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/platform/primitives/metadata

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## project-derivations

### GET /api/project-derivations/{operationId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/project-derivations/remix

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/project-derivations/remix-policy

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## public

### GET /api/public/creators/{handle}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/product-catalog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/search

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/worlds

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/worlds/{slug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/public/worlds/{slug}/reports

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `anonymous_write` | `anonymous_write` | no summary |

### GET /api/public/worlds/genres/{genreSlug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/worlds/media/{mediaId}/{contentDigest}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/worlds/sitemap-entries

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/worlds/sitemaps/manifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/public/worlds/sitemaps/shards/{shardId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

## root

### GET /

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /_app/assets/{assetFile}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `immutable_static_asset` | no summary |

### GET /_app/entry-manifest.json

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /_engine/assets/{assetFile}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `immutable_static_asset` | no summary |

### GET /_engine/static/{version}/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `immutable_static_asset` | no summary |

### GET /_engine/static/versions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /_engine/worker/{assetFile}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /_internal/model-preview-capture

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /.well-known/oauth-authorization-server

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /.well-known/oauth-authorization-server/mcp/auth

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /.well-known/oauth-protected-resource

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /.well-known/oauth-protected-resource/mcp/rpc

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /accept/{publicShareId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /admin

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /admin/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /android-chrome-192x192.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /android-chrome-512x512.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /apple-touch-icon.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /arcade

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /asset-packs/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /assets/{assetFile}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `immutable_static_asset` | no summary |

### GET /auth-hero.svg

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /auth-hero/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /basis/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /bench

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /bench/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /brand/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /browserconfig.xml

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /community

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /credits

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /desktop

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /discover

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /draco/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /example-models/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /favicon-16x16.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /favicon-32x32.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /favicon-48x48.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /favicon.ico

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /favicon.svg

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /fonts/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /games/{slug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /generate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /generate/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /health

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /health/security-posture

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `security_admin_read` | no summary |

### GET /icon-192.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /icon-512.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /lab

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /lab/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /llms.txt

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /marketplace

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /mcp/.well-known/oauth-protected-resource

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /mcp/auth/.well-known/oauth-authorization-server

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### POST /mcp/auth/authorization-requests

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_mutation` | no summary |

### GET /mcp/auth/authorization-requests/{requestId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /mcp/auth/authorization-requests/{requestId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /mcp/auth/jwks

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### POST /mcp/auth/register

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_mutation` | no summary |

### POST /mcp/auth/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_mutation` | no summary |

### POST /mcp/auth/token

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_mutation` | no summary |

### GET /mcp/rpc

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### POST /mcp/rpc

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_mutation` | no summary |

### GET /mstile-150x150.png

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /oauth/authorize

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /oauth/consent

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /onboarding/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /openapi.json

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /openapi.public.json

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /play/deployments/{deploymentId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /projects

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /ready

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /render-qa/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /replays/{replayId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /robots.txt

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /safari-pinned-tab.svg

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /settings

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /shell-palette.css

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /shop-floor.json

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /site.webmanifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /skybox/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /template-thumbnails/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

### GET /workspace/{workspaceId}/mcp

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `static_health_local` | `authenticated_read` | no summary |

## showcase

### GET /api/showcase/audio

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### GET /api/showcase/models

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/showcase/models/{showcaseId}/import-and-link

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/showcase/textures

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Public | `public_read` | `authenticated_read` | no summary |

### POST /api/showcase/textures/{showcaseId}/import-and-link

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## toolbox

### GET /api/toolbox/catalog

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## v1

### GET /api/v1/games/{gameId}/branches/{branchId}/history

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | List immutable branch commits at a captured head |

### GET /api/v1/games/{gameId}/content-versions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | List immutable content versions available for exact deployment or upgrade review |

### POST /api/v1/games/{gameId}/content-versions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Verify and publish the exact current project head without deploying it |

### POST /api/v1/games/{gameId}/deployments

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Deploy one immutable content version with one bundle-equal healthy runtime target |

### POST /api/v1/games/{gameId}/runtime-admissions/resolve

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Resolve and reverify the active immutable content/runtime deployment binding |

### GET /api/v1/games/{gameId}/runtime-targets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | List retained executable runtime targets and their observed health |

### POST /api/v1/games/{gameId}/upgrades/apply

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Apply an exact reviewed migration into a new immutable project branch |

### POST /api/v1/games/{gameId}/upgrades/review

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Bind an immutable compatibility review to an exact checkpoint and target release |

### GET /api/v1/games/{gameId}/version-history/checkpoints/{checkpointId}/preview

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/v1/games/{gameId}/version-history/checkpoints/{checkpointId}/resources/{resourceKind}/{resourceId}/blame

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/v1/games/{gameId}/version-history/compare

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/v1/games/{gameId}/versions

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | Read the persisted project release pin and compatibility state |

### GET /api/v1/games/{gameId}/versions/named

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | List durable named milestones on the canonical branch |

### POST /api/v1/games/{gameId}/versions/named

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Verify the current project head and name its immutable checkpoint |

### POST /api/v1/games/{gameId}/versions/named/{namedVersionId}/restore

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Restore a reviewed named checkpoint as one new forward commit |

### POST /api/v1/games/{gameId}/versions/named/{namedVersionId}/restore-review

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | Bind a whole-project restore review to an exact named checkpoint and current head |

## webmcp

### GET /api/webmcp/v1/manifest

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/webmcp/v1/tools/{toolName}/invoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

## workspaces

### GET /api/workspaces

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/workspaces/{workspaceId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/asset-folders

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/asset-folders

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/workspaces/{workspaceId}/asset-folders/{folderId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/workspaces/{workspaceId}/asset-folders/{folderId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/asset-tags

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/assets

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/assets/{assetIdOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/workspaces/{workspaceId}/assets/{assetIdOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/workspaces/{workspaceId}/assets/{assetIdOrKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/abort-upload

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/archive

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/complete-upload

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/dependencies

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/dependents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/link-game

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/purge

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/restore

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/{assetIdOrKey}/thumbnail

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/bulk-import

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/bulk-lifecycle

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/bulk-upload-intent

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/bulk/archive

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/bulk/purge

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/bulk/restore

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/bulk/trash

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/assets/delivery/{assetIdOrKey}/{variantKey}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/assets/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PUT /api/workspaces/{workspaceId}/assets/local-blob/{*}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/move

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/move-to-folder

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/tags

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/workspaces/{workspaceId}/assets/tags

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/tags/add

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/tags/remove

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/assets/upload-intents

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/billing/credit-auto-refill

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/billing/credits/summary

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/billing/customer-dashboard

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/billing/itemized-usage

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/billing/spend-caps

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/collaboration

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/collaboration/events

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/games

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/games

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/invitations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/invitations

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/workspaces/{workspaceId}/invitations/{invitationId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/invitations/{invitationId}/audit

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/invitations/{invitationId}/resend

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/mcp/activity

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/mcp/keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/mcp/keys

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/mcp/keys/{keyId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/mcp/keys/{keyId}/rotate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/mcp/oauth-grants

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/mcp/oauth-grants/{grantId}/revoke

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/mcp/usage

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### GET /api/workspaces/{workspaceId}/members

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### PATCH /api/workspaces/{workspaceId}/members/{memberId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### DELETE /api/workspaces/{workspaceId}/members/{memberId}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/workspaces/{workspaceId}/project-derivations/duplicate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PUT /api/workspaces/{workspaceId}/slug

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/{workspaceId}/storage-usage

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/workspaces/{workspaceId}/transfer-ownership

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/workspaces/by-slug/{workspaceSlug}/worlds/{worldSlug}

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

## world-publications

### POST /api/world-publications/{publicationId}/activate

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PUT /api/world-publications/{publicationId}/cover

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/creator-attestation

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### GET /api/world-publications/{publicationId}/custom-hostnames

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_read` | no summary |

### POST /api/world-publications/{publicationId}/custom-hostnames

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/custom-hostnames/{bindingId}/disable

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/custom-hostnames/{bindingId}/dns-challenges

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/custom-hostnames/{bindingId}/dns-challenges/{challengeId}/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/custom-hostnames/{bindingId}/release

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/custom-hostnames/transfer-challenges

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/custom-hostnames/transfer-challenges/{challengeId}/verify

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/world-publications/{publicationId}/metadata

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/retire

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### POST /api/world-publications/{publicationId}/slug

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |

### PATCH /api/world-publications/{publicationId}/slug

| Auth posture | Policy class | Rate limit | Summary |
| --- | --- | --- | --- |
| Auth required | `browser_session` | `authenticated_mutation` | no summary |