{
  "info": {
    "_postman_id": "agentrouter-api-0.1.1",
    "description": "AgentRouter API requests, generated from the combined OpenAPI spec by scripts/sdk-package.sh. Set the baseUrl and apiKey collection variables before sending.",
    "name": "AgentRouter API",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
  },
  "item": [
    {
      "item": [
        {
          "name": "ListCustomers",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers"
            }
          }
        },
        {
          "name": "CreateCustomer",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers"
            }
          }
        },
        {
          "name": "DeleteCustomer",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetCustomer",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateCustomer",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProjects",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "CreateProject",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "DeleteProject",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetProject",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateProject",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProjectMcpServers",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-servers"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/mcp-servers",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "AddProjectMcpServer",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-servers"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/mcp-servers",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RemoveProjectMcpServer",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-servers",
                ":server_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/mcp-servers/{server_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "server_id",
                  "key": "server_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProjectMembers",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/members",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "AddProjectMember",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/members",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RemoveProjectMember",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members",
                ":user_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/members/{user_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateProjectMember",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members",
                ":user_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/members/{user_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProjectModels",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "models"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/models",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "AddProjectModel",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "models"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/models",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RemoveProjectModel",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "models",
                ":model_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/models/{model_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "model_id",
                  "key": "model_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProjectProviders",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "providers"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/providers",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "AddProjectProvider",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "providers"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/providers",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RemoveProjectProvider",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "providers",
                ":provider_name"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/providers/{provider_name}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "provider_name",
                  "key": "provider_name",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetProjectSettings",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "settings"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/settings",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "DeleteProjectSetting",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "settings",
                ":setting_name"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/settings/{setting_name}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "setting_name",
                  "key": "setting_name",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpsertProjectSetting",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PUT",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "settings",
                ":setting_name"
              ],
              "raw": "{{baseUrl}}/admin/v1/customers/{customer_id}/projects/{project_id}/settings/{setting_name}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "setting_name",
                  "key": "setting_name",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListModels",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "models"
              ],
              "raw": "{{baseUrl}}/admin/v1/models"
            }
          }
        },
        {
          "name": "GetModel",
          "request": {
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "models",
                ":model_id"
              ],
              "raw": "{{baseUrl}}/admin/v1/models/{model_id}",
              "variable": [
                {
                  "description": "model_id",
                  "key": "model_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "Ping",
          "request": {
            "description": "Ping endpoint for health checks and authentication testing",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "ping"
              ],
              "raw": "{{baseUrl}}/admin/v1/ping"
            }
          }
        },
        {
          "name": "ListServiceAccounts",
          "request": {
            "description": "List service accounts",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "service-accounts"
              ],
              "raw": "{{baseUrl}}/admin/v1/service-accounts"
            }
          }
        },
        {
          "name": "CreateServiceAccount",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Create service account",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "service-accounts"
              ],
              "raw": "{{baseUrl}}/admin/v1/service-accounts"
            }
          }
        },
        {
          "name": "GetServiceAccount",
          "request": {
            "description": "Get service account",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "service-accounts",
                ":id"
              ],
              "raw": "{{baseUrl}}/admin/v1/service-accounts/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RestoreServiceAccount",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Restore service account\n Restores a revoked service account to active status.\n Only one active service account per customer_id + workspace_id is allowed.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "service-accounts",
                "{id}:restore"
              ],
              "raw": "{{baseUrl}}/admin/v1/service-accounts/{id}:restore"
            }
          }
        },
        {
          "name": "RevokeServiceAccount",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Revoke service account",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "service-accounts",
                "{id}:revoke"
              ],
              "raw": "{{baseUrl}}/admin/v1/service-accounts/{id}:revoke"
            }
          }
        },
        {
          "name": "ListTelemetryConfigs",
          "request": {
            "description": "List telemetry configs",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "telemetry-configs"
              ],
              "raw": "{{baseUrl}}/admin/v1/telemetry-configs"
            }
          }
        },
        {
          "name": "CreateTelemetryConfig",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Create telemetry config",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "telemetry-configs"
              ],
              "raw": "{{baseUrl}}/admin/v1/telemetry-configs"
            }
          }
        },
        {
          "name": "DeleteTelemetryConfig",
          "request": {
            "description": "Delete telemetry config",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "telemetry-configs",
                ":id"
              ],
              "raw": "{{baseUrl}}/admin/v1/telemetry-configs/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetTelemetryConfig",
          "request": {
            "description": "Get telemetry config",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "telemetry-configs",
                ":id"
              ],
              "raw": "{{baseUrl}}/admin/v1/telemetry-configs/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateTelemetryConfig",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Update telemetry config",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "telemetry-configs",
                ":id"
              ],
              "raw": "{{baseUrl}}/admin/v1/telemetry-configs/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListUserTokens",
          "request": {
            "description": "List user tokens",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "user-tokens"
              ],
              "raw": "{{baseUrl}}/admin/v1/user-tokens"
            }
          }
        },
        {
          "name": "CreateUserToken",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Create user token\n Generates a JWT token for user authentication with gatekeeper.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "user-tokens"
              ],
              "raw": "{{baseUrl}}/admin/v1/user-tokens"
            }
          }
        },
        {
          "name": "GetUserToken",
          "request": {
            "description": "Get user token",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "user-tokens",
                ":jti"
              ],
              "raw": "{{baseUrl}}/admin/v1/user-tokens/{jti}",
              "variable": [
                {
                  "description": "jti",
                  "key": "jti",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RevokeUserToken",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Revoke user token\n Revokes a user token by its JTI (JWT ID).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "user-tokens",
                "{jti}:revoke"
              ],
              "raw": "{{baseUrl}}/admin/v1/user-tokens/{jti}:revoke"
            }
          }
        },
        {
          "name": "ListWorkspaces",
          "request": {
            "description": "List workspaces",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "workspaces"
              ],
              "raw": "{{baseUrl}}/admin/v1/workspaces"
            }
          }
        },
        {
          "name": "CreateWorkspace",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Create workspace",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "workspaces"
              ],
              "raw": "{{baseUrl}}/admin/v1/workspaces"
            }
          }
        },
        {
          "name": "DeleteWorkspace",
          "request": {
            "description": "Delete workspace (soft delete)",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "workspaces",
                ":id"
              ],
              "raw": "{{baseUrl}}/admin/v1/workspaces/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetWorkspace",
          "request": {
            "description": "Get workspace",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "workspaces",
                ":id"
              ],
              "raw": "{{baseUrl}}/admin/v1/workspaces/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateWorkspace",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Update workspace",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "workspaces",
                ":id"
              ],
              "raw": "{{baseUrl}}/admin/v1/workspaces/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "SetWorkspaceProject",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Assign workspace to a project (or clear back to default project by omitting project_id)",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "workspaces",
                ":id",
                "project"
              ],
              "raw": "{{baseUrl}}/admin/v1/workspaces/{id}/project",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "SetWorkspaceURL",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Set the customer-facing gateway URL for a workspace data plane.\n Writes system_settings.dataplane-url:<workspace_id> and optionally fires a PROXY_URL config event.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "admin",
                "v1",
                "workspaces",
                ":id",
                "url"
              ],
              "raw": "{{baseUrl}}/admin/v1/workspaces/{id}/url",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.admin.v1.AdminService"
    },
    {
      "item": [
        {
          "name": "List",
          "request": {
            "description": "List lists BYOK keys registered under a project. Returns metadata\n only -- id, provider, name, display_suffix, creation timestamp, and\n revocation timestamp if revoked. The result includes the project's\n shared keys plus the caller's own user-scoped keys (other users'\n user-scoped keys are not returned).\n\n Scope: account-tier; membership is enforced in-handler.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "aikeys"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/aikeys",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "Register",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Register encrypts and stores a provider API key under a project.\n After this call, inference requests routed to the matching provider\n for this project will use this key.\n\n Scope: account-tier so any project member can register their OWN\n user-scoped key (user_scope=true). Registering a PROJECT-level key\n (user_scope=false) additionally requires the caller to be the\n project's owner -- enforced in-handler against project_members.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "aikeys"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/aikeys",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "Revoke",
          "request": {
            "description": "Revoke marks the key revoked; subsequent Fetches return\n permission_denied. Inflight cached keys on dataplanes invalidate\n within sub-second via the revocation channel (milestone C).\n\n Scope: account-tier so a member can revoke their OWN user-scoped key.\n Revoking a PROJECT-level key additionally requires project ownership\n (enforced in-handler); a member may never revoke another user's\n user-scoped key.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "aikeys",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/aikeys/{id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "Get",
          "request": {
            "description": "Get returns the metadata record for a single BYOK key. Never returns\n the plaintext.\n\n Scope: account-tier. Any project member may read keys in the project\n (project-level and the caller's own user-scoped keys); membership is\n enforced in-handler.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "aikeys",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/aikeys/{id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.aikeys.v1.AiKeysService"
    },
    {
      "item": [
        {
          "name": "CreateApiKey",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateApiKey creates a new JWT user-token API key for a user and returns the plaintext token exactly once.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "api-keys"
              ],
              "raw": "{{baseUrl}}/v1/api-keys"
            }
          }
        },
        {
          "name": "DeleteApiKey",
          "request": {
            "description": "DeleteApiKey soft-deletes an API key (sets deleted_at).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "api-keys",
                ":key_id"
              ],
              "raw": "{{baseUrl}}/v1/api-keys/{key_id}",
              "variable": [
                {
                  "description": "key_id",
                  "key": "key_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateApiKey",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateApiKey updates mutable fields of an API key (name and/or active state).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "api-keys",
                ":key_id"
              ],
              "raw": "{{baseUrl}}/v1/api-keys/{key_id}",
              "variable": [
                {
                  "description": "key_id",
                  "key": "key_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.api_keys.v1.ApiKeysService"
    },
    {
      "item": [
        {
          "name": "GetJWKS",
          "request": {
            "description": "JWKS endpoint.\n Public endpoint - no authentication required.\n Returns JSON Web Key Set for verifying JWT tokens.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                ".well-known",
                "jwks.json"
              ],
              "raw": "{{baseUrl}}/.well-known/jwks.json"
            }
          }
        }
      ],
      "name": "agentrouter.auth.v1.AuthService"
    },
    {
      "item": [
        {
          "name": "ListModels",
          "request": {
            "description": "ListModels returns catalog models, optionally filtered to a single\n provider via the provider_id query parameter.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "models"
              ],
              "raw": "{{baseUrl}}/v1/catalog/models"
            }
          }
        },
        {
          "name": "UpsertModel",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpsertModel creates or fully replaces a model record.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "models"
              ],
              "raw": "{{baseUrl}}/v1/catalog/models"
            }
          }
        },
        {
          "name": "DeleteModel",
          "request": {
            "description": "DeleteModel removes a model entry.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "models",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/catalog/models/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetModel",
          "request": {
            "description": "GetModel returns a single model by id (UUID) or by unique model name,\n including its pricing, context window, and capabilities.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "models",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/catalog/models/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProviders",
          "request": {
            "description": "ListProviders returns all registered AI providers. Supports\n cursor-based pagination via page_size and page_token.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "providers"
              ],
              "raw": "{{baseUrl}}/v1/catalog/providers"
            }
          }
        },
        {
          "name": "UpsertProvider",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpsertProvider creates or fully replaces a provider record.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "providers"
              ],
              "raw": "{{baseUrl}}/v1/catalog/providers"
            }
          }
        },
        {
          "name": "DeleteProvider",
          "request": {
            "description": "DeleteProvider removes a provider. Refuses while any model still\n references it.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "providers",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/catalog/providers/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetProvider",
          "request": {
            "description": "GetProvider returns a single provider by id.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "providers",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/catalog/providers/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "SetProviderCredential",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "SetProviderCredential stores or rotates the credential used to\n authenticate requests to this provider. The plaintext is never\n returned; the provider's credential_suffix reflects the last 4\n characters.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "catalog",
                "providers",
                ":id",
                "credential"
              ],
              "raw": "{{baseUrl}}/v1/catalog/providers/{id}/credential",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProjectModels",
          "request": {
            "description": "ListProjectModels returns every catalog model assigned to a project.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "models"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/models",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "AssignModelToProject",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "AssignModelToProject grants a project access to a catalog model.\n Idempotent: re-assigning a model is a no-op.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "models"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/models",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UnassignModelFromProject",
          "request": {
            "description": "UnassignModelFromProject removes a project's access to a catalog model.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "models",
                ":model_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/models/{model_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "model_id",
                  "key": "model_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.catalog.v1.CatalogService"
    },
    {
      "item": [
        {
          "name": "ListClients",
          "request": {
            "description": "ListClients returns every client owned by the caller within the\n given (customer_id, project_id) scope.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "CreateClientWithKey",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateClientWithKey creates a new client and a new API key attached\n 1:1 (client_id == key_id at bootstrap).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetClient",
          "request": {
            "description": "GetClient returns a single client by id within the scope.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateClientTitle",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateClientTitle updates the editable client title.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "AddKeyToClient",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "AddKeyToClient attaches an existing key to a client.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id",
                "keys"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}/keys",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RotateKeyInClient",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "RotateKeyInClient creates a new key attached to client_id and may\n schedule the prior key's disable/destroy lifecycle.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id",
                "keys",
                "rotate"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}/keys/rotate",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "DestroyKeyVersionInClient",
          "request": {
            "description": "DestroyKeyVersionInClient permanently destroys a key version.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id",
                "keys",
                ":key_version"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}/keys/{key_version}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                },
                {
                  "description": "key_version",
                  "key": "key_version",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "DisableKeyVersionInClient",
          "request": {
            "description": "DisableKeyVersionInClient disables a key version immediately (reversible).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id",
                "keys",
                ":key_version",
                "disable"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}/keys/{key_version}/disable",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                },
                {
                  "description": "key_version",
                  "key": "key_version",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "EmergencyRevokeKeyVersion",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "EmergencyRevokeKeyVersion disables a key immediately and optionally\n creates a replacement.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id",
                "keys",
                ":key_version",
                "emergency-revoke"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}/keys/{key_version}/emergency-revoke",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                },
                {
                  "description": "key_version",
                  "key": "key_version",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "EnableKeyVersionInClient",
          "request": {
            "description": "EnableKeyVersionInClient re-enables a disabled key version.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "clients",
                ":client_id",
                "keys",
                ":key_version",
                "enable"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/clients/{client_id}/keys/{key_version}/enable",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "client_id",
                  "key": "client_id",
                  "value": ""
                },
                {
                  "description": "key_version",
                  "key": "key_version",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.clients.v1.ClientsService"
    },
    {
      "item": [
        {
          "name": "AcknowledgeEvent",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "AcknowledgeEvent marks an event as acknowledged by a worker.\n This prevents other workers from processing the same event.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "acknowledge-event"
              ],
              "raw": "{{baseUrl}}/configurator/v1/acknowledge-event"
            }
          }
        },
        {
          "name": "ListActiveProviders",
          "request": {
            "description": "ListActiveProviders returns a list of active (enabled) AI providers.\n Used for monitoring, debugging, and querying available provider configurations.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "active-providers"
              ],
              "raw": "{{baseUrl}}/configurator/v1/active-providers"
            }
          }
        },
        {
          "name": "ListActiveUsers",
          "request": {
            "description": "ListActiveUsers returns a list of user IDs that have active configurations.\n Used for monitoring and debugging.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "active-users"
              ],
              "raw": "{{baseUrl}}/configurator/v1/active-users"
            }
          }
        },
        {
          "name": "SaveBYOKBackends",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "SaveBYOKBackends saves BYOK provider backends configuration.\n Used by workers to persist BYOK backend metadata to database.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "byok-backends"
              ],
              "raw": "{{baseUrl}}/configurator/v1/byok-backends"
            }
          }
        },
        {
          "name": "DeleteBYOKBackends",
          "request": {
            "description": "DeleteBYOKBackends deletes BYOK provider backends configuration.\n Used by workers to remove BYOK backend metadata from database.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "byok-backends",
                ":user_id"
              ],
              "raw": "{{baseUrl}}/configurator/v1/byok-backends/{user_id}",
              "variable": [
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "CompleteEvent",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CompleteEvent marks an event as successfully applied or failed.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "complete-event"
              ],
              "raw": "{{baseUrl}}/configurator/v1/complete-event"
            }
          }
        },
        {
          "name": "GetConfiguration",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "GetConfiguration retrieves the latest configuration for a user.\n Returns configuration only if the version is newer than the provided\n version. Supports batch queries for multiple users for efficiency.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "config"
              ],
              "raw": "{{baseUrl}}/configurator/v1/config"
            }
          }
        },
        {
          "name": "ListConfigurations",
          "request": {
            "description": "ListConfigurations lists all configurations with optional filtering.\n Used for debugging and monitoring.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "configs"
              ],
              "raw": "{{baseUrl}}/configurator/v1/configs"
            }
          }
        },
        {
          "name": "SubmitDataplaneUpgradeCredentials",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "SubmitDataplaneUpgradeCredentials stores operator-provided registry\n credentials for a DATAPLANE_UPGRADE event parked in NeedsCredentials.\n Payload is KEK-envelope encrypted at MP and stored in\n dataplane_upgrade_credentials. Dashboard (admin) is the only caller.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "dataplane-upgrade-credentials"
              ],
              "raw": "{{baseUrl}}/configurator/v1/dataplane-upgrade-credentials"
            }
          }
        },
        {
          "name": "AckDataplaneUpgradeCredentials",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "AckDataplaneUpgradeCredentials confirms the worker successfully\n materialised the credentials Secret in-cluster. MP DELETEs the\n ciphertext row immediately — no 30-day retention. Workspace claim\n must match. Idempotent: a second Ack on an already-deleted row\n returns success.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "dataplane-upgrade-credentials",
                "ack"
              ],
              "raw": "{{baseUrl}}/configurator/v1/dataplane-upgrade-credentials/ack"
            }
          }
        },
        {
          "name": "GetDataplaneUpgradeCredentials",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "GetDataplaneUpgradeCredentials returns the operator-submitted\n credentials for an upgrade event. MP decrypts server-side and\n returns plaintext over TLS — the worker (DP cluster) never has\n KEK access. Caller's workspace claim must match the event's\n workspace. Read-only — no state change until AckDataplaneUpgradeCredentials.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "dataplane-upgrade-credentials",
                "get"
              ],
              "raw": "{{baseUrl}}/configurator/v1/dataplane-upgrade-credentials/get"
            }
          }
        },
        {
          "name": "CancelDataplaneUpgrade",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CancelDataplaneUpgrade emits a pending UPGRADE_CANCEL event against\n the workspace. The liaison worker picks it up via the normal\n ListPendingEvents poll, matches the in-flight TarsUpgrade CR by name\n (= upgrade_event_id), and patches spec.cancel so the running Job\n initiates helm --atomic rollback at its next 5s poll tick. Idempotent:\n a no-op when the CR already has spec.cancel=true or has reached a\n terminal phase.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "dataplane-upgrade",
                "cancel"
              ],
              "raw": "{{baseUrl}}/configurator/v1/dataplane-upgrade/cancel"
            }
          }
        },
        {
          "name": "RollbackDataplaneUpgrade",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "RollbackDataplaneUpgrade emits a pending UPGRADE_ROLLBACK event\n against the workspace. Operator-initiated post-Completed rollback:\n dashboard shows a Rollback button after a successful upgrade so the\n operator can return to the prior helm revision (e.g. they want to\n unwind a release that's behaving badly under real traffic). Worker\n spawns a new rollback Job that runs\n `helm rollback tars <prev-revision> --wait --atomic`. The new event\n becomes the latest dataplane-upgrade view so the dashboard renders\n the in-flight rollback through phase RollingBack → RolledBack.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "dataplane-upgrade",
                "rollback"
              ],
              "raw": "{{baseUrl}}/configurator/v1/dataplane-upgrade/rollback"
            }
          }
        },
        {
          "name": "SetDataplaneURL",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "SetDataplaneURL persists the customer-facing gateway URL for a data plane\n (workspace). Called by `tare install` to register the URL at install time\n and by the management-plane dashboard when an admin edits it later.\n\n trigger_update=false (install path) only writes the system_settings row.\n trigger_update=true (admin-edit path) additionally fires a PROXY_URL\n configuration event so the running data plane converges on the new URL\n via the worker's existing event-handling loop.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "dataplane-url"
              ],
              "raw": "{{baseUrl}}/configurator/v1/dataplane-url"
            }
          }
        },
        {
          "name": "UpdateEventMetadata",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Replaces metadata JSON on an existing liaison_configuration_events row.\n Lets workers push mid-flight progress onto an event without changing\n its status (AcknowledgeEvent/CompleteEvent are terminal-only).\n Worker writes are scoped to the caller's workspace claim.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "event-metadata"
              ],
              "raw": "{{baseUrl}}/configurator/v1/event-metadata"
            }
          }
        },
        {
          "name": "FullSyncWorkspace",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "FullSyncWorkspace is the heavier \"last resort\" replay path: walks\n `liaison_configurations` directly rather than sibling events, so it\n can recover legacy unscoped events the drift sweep can't see. Worker\n calls this once on startup and every Nth drift sweep tick. Workspace\n and customer are resolved from the caller's auth claims.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "full-sync-workspace"
              ],
              "raw": "{{baseUrl}}/configurator/v1/full-sync-workspace"
            }
          }
        },
        {
          "name": "UpsertMCPCatalogServer",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpsertMCPCatalogServer wires a deployed in-cluster MCP server into the\n customer's catalog. Used by `tare mcp enable <server>`: the CLI looks\n up the server's seed entry in mcp-catalog-tare-mcp-with-tools.json, asks\n the operator for the in-cluster URL, and submits this RPC to set\n is_enabled=true on the corresponding mcp_catalog_servers row.\n\n Default behaviour (force_overwrite=false): if the row exists, only\n url + is_enabled (+updated_at) are updated; dashboard-set fields\n (description / icon / categories / tools / etc.) are preserved.\n If the row is new, the seed-provided fields are used to populate it.\n\n force_overwrite=true: every seed field is written, clobbering any\n dashboard edits. Use sparingly — intended for \"reset this row to\n seed defaults\" repairs.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "mcp-catalog",
                "upsert"
              ],
              "raw": "{{baseUrl}}/configurator/v1/mcp-catalog/upsert"
            }
          }
        },
        {
          "name": "ListPendingEvents",
          "request": {
            "description": "ListPendingEvents returns configuration events that need processing.\n Used by workers to discover which configurations have updates. The worker\n piggybacks its tare-doctor runtime observation onto this poll\n (request.doctor_runtime) so MP can explain a stale doctor report — hence\n this is no longer NO_SIDE_EFFECTS: a poll updates the data plane's\n doctor-runtime state.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "pending-events"
              ],
              "raw": "{{baseUrl}}/configurator/v1/pending-events"
            }
          }
        },
        {
          "name": "ReconcileWorkspace",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "ReconcileWorkspace re-enqueues missing or stale slot events for\n the caller's workspace by cloning the latest sibling event of each\n slot the workspace has not yet converged on. Used by the worker's\n periodic drift sweep. Workspace is resolved from the caller's auth\n claims; callers without a workspace claim are rejected.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "reconcile-workspace"
              ],
              "raw": "{{baseUrl}}/configurator/v1/reconcile-workspace"
            }
          }
        },
        {
          "name": "TriggerUpdate",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "TriggerUpdate triggers a configuration update for a specific user and\n config type. This is called by the dashboard when configuration changes.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "trigger"
              ],
              "raw": "{{baseUrl}}/configurator/v1/trigger"
            }
          }
        },
        {
          "name": "RevokeUserToken",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "RevokeUserToken revokes a user token by JTI.\n Used by workers in enterprise mode to revoke tokens when API keys are deleted.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "user-tokens",
                "{jti}:revoke"
              ],
              "raw": "{{baseUrl}}/configurator/v1/user-tokens/{jti}:revoke"
            }
          }
        },
        {
          "name": "ValidateDataplane",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "ValidateDataplane lets a data plane's filter confirm that this DP is\n still a valid (non-revoked) member of the customer and fetch the\n customer's current gatekeeper public keys. Authentication is via the\n caller's service-account JWT signed with its DP keypair\n (kid=`instance-<...>`). When the DP keypair has been soft-deleted at\n MP, the auth layer rejects the call with Unauthenticated — the filter\n treats that as \"revoked\" without needing a separate response field.\n On success, the response carries the customer's gatekeeper public\n keys so the filter can repopulate its in-memory cache (and the\n worker can repopulate `tars-config[gatekeeper-public-keys]`).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "configurator",
                "v1",
                "validate-dataplane"
              ],
              "raw": "{{baseUrl}}/configurator/v1/validate-dataplane"
            }
          }
        }
      ],
      "name": "agentrouter.configurator.v1.ConfiguratorService"
    },
    {
      "item": [
        {
          "name": "Login",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Login initiates an OIDC authorization-code + PKCE flow. Returns an\n authorization_url the caller must redirect the user's browser to.\n After the IdP authenticates and redirects to redirect_uri, the\n platform establishes a session cookie for subsequent requests.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "auth",
                "login"
              ],
              "raw": "{{baseUrl}}/v1/auth/login"
            }
          }
        },
        {
          "name": "Logout",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Logout invalidates the caller's current OIDC session. Subsequent\n requests using the session cookie return 401 unauthenticated. Does\n not revoke API keys the identity may have issued.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "auth",
                "logout"
              ],
              "raw": "{{baseUrl}}/v1/auth/logout"
            }
          }
        },
        {
          "name": "GetMe",
          "request": {
            "description": "GetMe returns the full identity record for the authenticated caller.\n Use to verify which identity a credential belongs to, populate a\n \"logged in as\" UI element, or confirm role assignments before making\n permission-gated calls.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "me"
              ],
              "raw": "{{baseUrl}}/v1/me"
            }
          }
        },
        {
          "name": "ListMyKeys",
          "request": {
            "description": "ListMyKeys lists all API keys belonging to the caller. Returns\n metadata (id, name, creation timestamp, last-used timestamp) but\n never the plaintext secret.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "me",
                "keys"
              ],
              "raw": "{{baseUrl}}/v1/me/keys"
            }
          }
        },
        {
          "name": "IssueMyKey",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "IssueMyKey issues a new long-lived API key for the caller. The\n secret field in the response is returned exactly once and cannot be\n retrieved again. Store it in a secrets manager immediately.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "me",
                "keys"
              ],
              "raw": "{{baseUrl}}/v1/me/keys"
            }
          }
        },
        {
          "name": "RevokeMyKey",
          "request": {
            "description": "RevokeMyKey permanently and irrevocably revokes an API key.\n Revocation propagates to all active data planes within sub-second;\n requests already in flight that passed authentication before\n propagation may still complete.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "me",
                "keys",
                ":key_id"
              ],
              "raw": "{{baseUrl}}/v1/me/keys/{key_id}",
              "variable": [
                {
                  "description": "key_id",
                  "key": "key_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.identity.v1.MeService"
    },
    {
      "item": [
        {
          "name": "Prompt",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "Prompt sends a prompt to an upstream LLM and returns the model's\n completion. The gateway selects an eligible data plane, retrieves\n and applies the project's BYOK key, enforces quota, records a\n request log entry, and proxies the call to the upstream provider.\n Streaming, multi-turn conversations, tools, and vision are not yet\n supported on this path.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "prompts"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/prompts",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetDataplaneURL",
          "request": {
            "description": "GetDataplaneURL returns the dataplane (gateway) URL for a single project.\n The project is deduced from the caller's credential -- no input is required\n in the common case: a caller who belongs to one project gets that project's\n dataplane; one whose identity spans several gets their default (the oldest\n membership). Pass project_id to disambiguate or target a specific project\n (it is membership-checked). The customer is derived the same way. When the\n credential itself already pins a workspace, that workspace is used directly.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "dataplane-url"
              ],
              "raw": "{{baseUrl}}/v1/dataplane-url"
            }
          }
        },
        {
          "name": "ListDataplaneURLs",
          "request": {
            "description": "ListDataplaneURLs returns every dataplane URL the caller can reach -- one\n per workspace under the customer deduced from the credential. Key-deduced;\n no input. Use GetDataplaneURL when a single project's URL is wanted.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "dataplane-urls"
              ],
              "raw": "{{baseUrl}}/v1/dataplane-urls"
            }
          }
        }
      ],
      "name": "agentrouter.inference.v1.InferenceIngressService"
    },
    {
      "item": [
        {
          "name": "ListCustomerRequestLogs",
          "request": {
            "description": "ListCustomerRequestLogs returns the caller's own request logs,\n filtered by the supplied tenancy scope. Forced filter:\n `user_id = caller.UserID`.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "request-logs"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/request-logs",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetCustomerRequestLogStats",
          "request": {
            "description": "GetCustomerRequestLogStats returns aggregated statistics over the\n calling user's request logs within the supplied tenancy scope.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "request-logs",
                "stats"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/request-logs/stats",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetCustomerRequestLog",
          "request": {
            "description": "GetCustomerRequestLog returns a single request log row owned by the\n calling user. Cross-user NotFound: the user cannot read another\n user's log even within the same customer/project.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "request-logs",
                ":request_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/request-logs/{request_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "request_id",
                  "key": "request_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.insights.v1.CustomerRequestLogsService"
    },
    {
      "item": [
        {
          "name": "QueryRequestLogs",
          "request": {
            "description": "QueryRequestLogs retrieves request logs with filtering and pagination.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "request-logs"
              ],
              "raw": "{{baseUrl}}/v1/request-logs"
            }
          }
        },
        {
          "name": "GetRequestLogStats",
          "request": {
            "description": "GetRequestLogStats returns aggregated statistics for request logs.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "request-logs",
                "stats"
              ],
              "raw": "{{baseUrl}}/v1/request-logs/stats"
            }
          }
        },
        {
          "name": "GetRequestLog",
          "request": {
            "description": "GetRequestLog retrieves a single request log by request ID.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "request-logs",
                ":request_id"
              ],
              "raw": "{{baseUrl}}/v1/request-logs/{request_id}",
              "variable": [
                {
                  "description": "request_id",
                  "key": "request_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.insights.v1.RequestLogsService"
    },
    {
      "item": [
        {
          "name": "ListCatalogServers",
          "request": {
            "description": "ListCatalogServers returns every catalog entry, including disabled\n rows so operators can re-enable them. The dashboard's read-only\n view filters to is_enabled=true.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "mcp",
                "catalog",
                "servers"
              ],
              "raw": "{{baseUrl}}/v1/mcp/catalog/servers"
            }
          }
        },
        {
          "name": "UpsertCatalogServer",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpsertCatalogServer creates or replaces a catalog entry. Idempotent\n on `id`. Operator-only.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "mcp",
                "catalog",
                "servers"
              ],
              "raw": "{{baseUrl}}/v1/mcp/catalog/servers"
            }
          }
        },
        {
          "name": "DeleteCatalogServer",
          "request": {
            "description": "DeleteCatalogServer removes a catalog entry by id. Operator-only.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "mcp",
                "catalog",
                "servers",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/mcp/catalog/servers/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetCatalogServer",
          "request": {
            "description": "GetCatalogServer returns a single catalog entry by id.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "mcp",
                "catalog",
                "servers",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/mcp/catalog/servers/{id}",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "SetCatalogServerEnabled",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "SetCatalogServerEnabled flips the operator visibility toggle on a\n catalog entry. Split from UpsertCatalogServer so a re-upsert that\n refreshes content fields (display_name, url, ...) cannot silently\n re-enable a previously-disabled row through the proto bool zero\n value.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "mcp",
                "catalog",
                "servers",
                ":id",
                "enabled"
              ],
              "raw": "{{baseUrl}}/v1/mcp/catalog/servers/{id}/enabled",
              "variable": [
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.mcp.v1.MCPCatalogService"
    },
    {
      "item": [
        {
          "name": "ListMCPProfiles",
          "request": {
            "description": "ListMCPProfiles lists every profile owned by the given\n (user_id, customer_id, project_id) scope.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "users",
                ":user_id",
                "mcp-profiles"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/users/{user_id}/mcp-profiles",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "CreateMCPProfile",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateMCPProfile registers a new MCP server for a user.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "users",
                ":user_id",
                "mcp-profiles"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/users/{user_id}/mcp-profiles",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "DeleteMCPProfile",
          "request": {
            "description": "DeleteMCPProfile soft-deletes a profile (deleted_at set; row kept\n for FK integrity against historical request logs).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "users",
                ":user_id",
                "mcp-profiles",
                ":profile_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/users/{user_id}/mcp-profiles/{profile_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                },
                {
                  "description": "profile_id",
                  "key": "profile_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetMCPProfile",
          "request": {
            "description": "GetMCPProfile returns a single profile by uuid.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "users",
                ":user_id",
                "mcp-profiles",
                ":profile_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/users/{user_id}/mcp-profiles/{profile_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                },
                {
                  "description": "profile_id",
                  "key": "profile_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateMCPProfile",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateMCPProfile updates mutable profile fields. Omitted scalar\n strings (\"\") leave the existing value untouched.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "users",
                ":user_id",
                "mcp-profiles",
                ":profile_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/users/{user_id}/mcp-profiles/{profile_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "user_id",
                  "key": "user_id",
                  "value": ""
                },
                {
                  "description": "profile_id",
                  "key": "profile_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.mcp.v1.MCPProfilesService"
    },
    {
      "item": [
        {
          "name": "ListMcpOAuthClients",
          "request": {
            "description": "ListMcpOAuthClients lists every non-deleted OAuth client in the\n (customer, project) scope. Account tier: any project member may read.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-oauth-clients"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/mcp-oauth-clients",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "CreateMcpOAuthClient",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateMcpOAuthClient registers a new OAuth client under a project.\n The client_secret is wrapped by the secret service and discarded;\n only an sm:// reference is persisted.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-oauth-clients"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/mcp-oauth-clients",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "DeleteMcpOAuthClient",
          "request": {
            "description": "DeleteMcpOAuthClient soft-deletes a client (deleted_at set).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-oauth-clients",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/mcp-oauth-clients/{id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetMcpOAuthClient",
          "request": {
            "description": "GetMcpOAuthClient returns a single OAuth client by id. Never returns\n the client_secret. Account tier: any project member may read.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-oauth-clients",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/mcp-oauth-clients/{id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateMcpOAuthClient",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateMcpOAuthClient applies a partial patch. Omitted scalar strings\n (\"\") leave the existing value untouched. A non-empty client_secret\n rotates the wrapped secret in place.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "mcp-oauth-clients",
                ":id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/mcp-oauth-clients/{id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "id",
                  "key": "id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.mcp.v1.McpOAuthClientsService"
    },
    {
      "item": [
        {
          "name": "ListSecrets",
          "request": {
            "description": "ListSecrets lists all secrets for the authenticated user.\n Returns metadata only, not plaintext values.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "secrets"
              ],
              "raw": "{{baseUrl}}/v1/secrets"
            }
          }
        },
        {
          "name": "CreateSecret",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateSecret creates or updates a secret.\n If a secret with the same name exists, it will be updated.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "secrets"
              ],
              "raw": "{{baseUrl}}/v1/secrets"
            }
          }
        },
        {
          "name": "DeleteSecret",
          "request": {
            "description": "DeleteSecret deletes a secret by name.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "secrets",
                ":name"
              ],
              "raw": "{{baseUrl}}/v1/secrets/{name}",
              "variable": [
                {
                  "description": "name",
                  "key": "name",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetSecret",
          "request": {
            "description": "GetSecret retrieves a secret by name.\n Returns metadata only, not the plaintext value.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "secrets",
                ":name"
              ],
              "raw": "{{baseUrl}}/v1/secrets/{name}",
              "variable": [
                {
                  "description": "name",
                  "key": "name",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RotateSecret",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "RotateSecret rotates a secret by creating a new version.\n The old version is marked as rotated_pending for graceful transition.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "secrets",
                ":name",
                "rotate"
              ],
              "raw": "{{baseUrl}}/v1/secrets/{name}/rotate",
              "variable": [
                {
                  "description": "name",
                  "key": "name",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ValidateSecret",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "ValidateSecret validates that a secret can be decrypted.\n Used for health checks and troubleshooting.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "secrets",
                ":name",
                "validate"
              ],
              "raw": "{{baseUrl}}/v1/secrets/{name}/validate",
              "variable": [
                {
                  "description": "name",
                  "key": "name",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetSecretValue",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "GetSecretValue retrieves the plaintext value of a secret.\n INTERNAL USE ONLY - This endpoint decrypts and returns the actual secret\n value. Should only be called by internal services (Liaison, Butler2, etc.)",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "secrets",
                ":name",
                "value"
              ],
              "raw": "{{baseUrl}}/v1/secrets/{name}/value",
              "variable": [
                {
                  "description": "name",
                  "key": "name",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.secret.v1.SecretService"
    },
    {
      "item": [
        {
          "name": "ListTelemetryConfigs",
          "request": {
            "description": "ListTelemetryConfigs lists every configuration owned by the caller\n within the (customer, project) scope.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "telemetry"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/telemetry",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "CreateTelemetryConfig",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateTelemetryConfig creates a new OTel export configuration.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "telemetry"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/telemetry",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetProjectTelemetryConfig",
          "request": {
            "description": "GetProjectTelemetryConfig returns the PROJECT-level telemetry config.\n Project-owner-tier (the shared project default is managed by owners).",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "telemetry",
                "project"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/telemetry/project",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "SetProjectTelemetryConfig",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "SetProjectTelemetryConfig upserts the PROJECT-level telemetry export\n config (the shared default applied to project members who have no\n config of their own). Project-owner-tier: only the project's owner may\n set it. A user's own per-user config OVERRIDES this at emit time.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PUT",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "telemetry",
                "project"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/telemetry/project",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "DeleteTelemetryConfig",
          "request": {
            "description": "DeleteTelemetryConfig removes a configuration.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "telemetry",
                ":config_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/telemetry/{config_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "config_id",
                  "key": "config_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetTelemetryConfig",
          "request": {
            "description": "GetTelemetryConfig returns a single configuration by id.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "telemetry",
                ":config_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/telemetry/{config_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "config_id",
                  "key": "config_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateTelemetryConfig",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateTelemetryConfig updates a configuration's mutable fields.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "telemetry",
                ":config_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/telemetry/{config_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "config_id",
                  "key": "config_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.telemetry.v1.TelemetryService"
    },
    {
      "item": [
        {
          "name": "ListProjects",
          "request": {
            "description": "ListProjects lists projects within a customer scope.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "CreateProject",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateProject creates a project within a customer scope.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ArchiveProject",
          "request": {
            "description": "ArchiveProject soft-deletes a project. Refuses to archive the\n default project, matching the existing admin.v1 behaviour.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetProject",
          "request": {
            "description": "GetProject returns a single project by id.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateProject",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateProject updates mutable project fields.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "ListProjectMembers",
          "request": {
            "description": "ListProjectMembers lists all members of a project and their roles.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/members",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "AddProjectMember",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "AddProjectMember grants an identity access to a project with the\n given role bundle.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/members",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "RemoveProjectMember",
          "request": {
            "description": "RemoveProjectMember revokes an identity's membership in a project.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members",
                ":identity_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/members/{identity_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "identity_id",
                  "key": "identity_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateProjectMember",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateProjectMember updates an existing project member's role.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id",
                "projects",
                ":project_id",
                "members",
                ":identity_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}/projects/{project_id}/members/{identity_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                },
                {
                  "description": "project_id",
                  "key": "project_id",
                  "value": ""
                },
                {
                  "description": "identity_id",
                  "key": "identity_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.tenancy.v1.ProjectsService"
    },
    {
      "item": [
        {
          "name": "ListCustomers",
          "request": {
            "description": "ListCustomers lists all customers visible to the caller.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers"
              ],
              "raw": "{{baseUrl}}/v1/customers"
            }
          }
        },
        {
          "name": "CreateCustomer",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "CreateCustomer creates a new customer record. A customer owns\n projects, identities, and billing. Typically called once during\n provisioning of a new tenant.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers"
              ],
              "raw": "{{baseUrl}}/v1/customers"
            }
          }
        },
        {
          "name": "ArchiveCustomer",
          "request": {
            "description": "ArchiveCustomer soft-deletes a customer. The row stays in the\n database with deleted_at set; future Get / List calls treat it as\n missing.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "DELETE",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "GetCustomer",
          "request": {
            "description": "GetCustomer returns a single customer by id.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        },
        {
          "name": "UpdateCustomer",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateCustomer updates mutable customer fields (display_name,\n description, labels). `customer_id` is immutable.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "PATCH",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "customers",
                ":customer_id"
              ],
              "raw": "{{baseUrl}}/v1/customers/{customer_id}",
              "variable": [
                {
                  "description": "customer_id",
                  "key": "customer_id",
                  "value": ""
                }
              ]
            }
          }
        }
      ],
      "name": "agentrouter.tenancy.v1.TenancyService"
    },
    {
      "item": [
        {
          "name": "GetRevocationList",
          "request": {
            "description": "GetRevocationList returns a list of revoked token JTIs.\n This is used by dataplane to cache and check token revocations locally.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              }
            ],
            "method": "GET",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "tokens",
                "revocations"
              ],
              "raw": "{{baseUrl}}/v1/tokens/revocations"
            }
          }
        },
        {
          "name": "UpdateLastUsed",
          "request": {
            "body": {
              "mode": "raw",
              "options": {
                "raw": {
                  "language": "json"
                }
              },
              "raw": "{}"
            },
            "description": "UpdateLastUsed updates the last used timestamp for a token.\n Called by dataplane when a token is used for authentication.",
            "header": [
              {
                "key": "Authorization",
                "value": "Bearer {{apiKey}}"
              },
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "method": "POST",
            "url": {
              "host": [
                "{{baseUrl}}"
              ],
              "path": [
                "v1",
                "tokens",
                "usage"
              ],
              "raw": "{{baseUrl}}/v1/tokens/usage"
            }
          }
        }
      ],
      "name": "agentrouter.tokens.v1.TokensService"
    }
  ],
  "variable": [
    {
      "key": "baseUrl",
      "type": "string",
      "value": "https://api.agentrouter.example"
    },
    {
      "key": "apiKey",
      "type": "string",
      "value": ""
    }
  ]
}
