Skip to content
SkillPouchSkillPouch Docs

Overview

SkillPouch API 1.0.0

Section titled “SkillPouch API 1.0.0”

End-to-end encrypted sync for AI harness skills and instructions.

Every JSON response uses the envelope { ok, data | error, meta }. Error codes: https://docs.skillpouch.net/errors.

Authentication. CLI devices send Authorization: DPoP <access token> plus a DPoP proof (RFC 9449) signed by the device key. Browsers use the session cookie plus a DPoP proof from the key bound with POST /v1/session/bind, and send Skillpouch-Client: web on writes. Fetch a nonce from GET /v1/dpop/nonce.

Operations

Section titled “Operations”
GET
/healthz
GET
/readyz
GET
/v1/dpop/nonce
POST
/v1/session/bind
POST
/v1/cli-auth/requests
GET
/v1/cli-auth/requests/{id}
DELETE
/v1/cli-auth/requests/{id}
POST
/v1/cli-auth/requests/{id}/approve
POST
/v1/cli-auth/requests/{id}/deny
POST
/v1/cli-auth/token
POST
/v1/cli-auth/connect-tokens
GET
/v1/cli-auth/connect-tokens/{id}
DELETE
/v1/cli-auth/connect-tokens/{id}
GET
/v1/cli/latest
POST
/v1/devices/token
GET
/v1/devices
PATCH
/v1/devices/{id}
PATCH
/v1/devices/me
POST
/v1/devices/{id}/revoke
POST
/v1/devices/me/logout
POST
/v1/browsers/{id}/revoke
PUT
/v1/devices/me/cursor
PUT
/v1/devices/me/active-pouch
GET
/v1/devices/me/cursors
GET
/v1/me
GET
/v1/security/events
POST
/v1/security/events/{id}/ack
POST
/v1/security/reports
DELETE
/v1/account
POST
/v1/account/restore
POST
/v1/account/reset-encryption
DELETE
/v1/account/reset-encryption
POST
/v1/account/roster/genesis
GET
/v1/account/roster
POST
/v1/account/roster
GET
/v1/account/members
GET
/v1/account/key-envelopes
GET
/v1/account/storage
GET
/v1/account/unlock/params
POST
/v1/account/unlock/prepare
POST
/v1/account/unlock/pepper
POST
/v1/account/unlock/failed
GET
/v1/account/unlock/envelopes
PUT
/v1/account/unlock
POST
/v1/account/browsers/enroll
POST
/v1/account/browsers/renew-trust
GET
/v1/account/security-settings
PATCH
/v1/account/security-settings
POST
/v1/account/passkeys/options
POST
/v1/account/passkeys
DELETE
/v1/account/passkeys/{id}
PATCH
/v1/account/passkeys/{id}
POST
/v1/account/passkeys/assert-options
POST
/v1/account/passkeys/assert
GET
/v1/pouches
POST
/v1/pouches
GET
/v1/pouches/{pouchId}
DELETE
/v1/pouches/{pouchId}
PATCH
/v1/pouches/{pouchId}
POST
/v1/pouches/{pouchId}/activate
POST
/v1/pouches/{pouchId}/restore
POST
/v1/pouches/{pouchId}/free-space
POST
/v1/pouches/{pouchId}/blobs/check
GET
/v1/pouches/{pouchId}/blobs/{blobId}
PUT
/v1/pouches/{pouchId}/blobs/{blobId}
POST
/v1/pouches/{pouchId}/blobs/batch
POST
/v1/pouches/{pouchId}/blobs/fetch
POST
/v1/pouches/{pouchId}/operations
GET
/v1/pouches/{pouchId}/events
GET
/v1/events/stream
POST
/v1/pouches/{pouchId}/snapshots
GET
/v1/pouches/{pouchId}/snapshots/{snapshotId}
PUT
/v1/pouches/{pouchId}/checkpoints/me
GET
/v1/pouches/{pouchId}/checkpoints
GET
/v1/pouches/{pouchId}/artifacts
GET
/v1/pouches/{pouchId}/artifacts/{artifactId}/revisions
GET
/v1/pouches/{pouchId}/revisions
GET
/v1/pouches/{pouchId}/conflicts
GET
/v1/pouches/{pouchId}/conflicts/{conflictId}
GET
/v1/pouches/{pouchId}/bindings
PUT
/v1/pouches/{pouchId}/bindings
GET
/v1/plans
GET
/v1/billing
POST
/v1/billing/checkout
POST
/v1/billing/change-plan
GET
/v1/billing/invoices
GET
/v1/billing/invoices/{invoiceId}/pdf
GET
/v1/billing/invoices/{invoiceId}/receipt
POST
/v1/billing/sync
POST
/v1/billing/portal
POST
/v1/billing/webhooks/polar
GET
/v1/admin/overview
GET
/v1/admin/analytics
GET
/v1/admin/payments
POST
/v1/admin/payments/sync
GET
/v1/admin/users
GET
/v1/admin/users/{id}
POST
/v1/admin/users/{id}/role
POST
/v1/admin/users/{id}/suspend
POST
/v1/admin/users/{id}/unsuspend
POST
/v1/admin/users/{id}/revoke-devices
POST
/v1/admin/users/{id}/grants
POST
/v1/admin/grants/{id}/revoke
PUT
/v1/admin/users/{id}/override
DELETE
/v1/admin/users/{id}/override
POST
/v1/admin/users/{id}/delete
GET
/v1/admin/plans
POST
/v1/admin/plans
PUT
/v1/admin/plans/{id}
GET
/v1/admin/subscriptions
GET
/v1/admin/audit
GET
/v1/admin/system
PUT
/v1/admin/system/write-pause
GET
/v1/import/github/scan
GET
/v1/marketplaces
POST
/v1/marketplaces
DELETE
/v1/marketplaces/{marketplaceId}
GET
/v1/marketplaces/{marketplaceId}/items
GET
/v1/marketplaces/{marketplaceId}/item
GET
/v1/github/repository
GET
/v1/github/repository/item
GET
/v1/github/repositories
POST
/v1/github/connect
DELETE
/v1/github/connect
PUT
/v1/usage/sources/{sourceId}
GET
/v1/usage
POST
/v1/pouches/{pouchId}/shares
GET
/v1/shares
POST
/v1/shares/{id}/revoke
GET
/v1/public/shares/{id}
GET
/v1/public/shares/{id}/bundle
POST
/v1/shares/{id}/claim
POST
/v1/shares/{id}/imported

Authentication

Section titled “Authentication”

dpop

Section titled “dpop”

DPoP-bound access token + DPoP proof

Security scheme type: http

session

Section titled “session”

Security scheme type: apiKey

Cookie parameter name: sp.session_token