Skip to content

Overview

Headless REST API for OpenBot. To authenticate, send Authorization: Bearer <user token>. Create tokens at /v1/user/tokens. Every call needs a permission from a role or policy. Browser clients on the same origin can use the session Cookie instead. Then every write must send the exact public Origin.

This reference is made from the same contract that the server and the TypeScript client use, so it always matches the running OpenBot. Download the OpenAPI document to use it with your own tools, such as a code generator. Every OpenBot also serves it at /openapi.json. See Authentication and Permissions.

Information

  • OpenAPI version: 3.1.0

Security scheme type: http

Security scheme type: apiKey

Cookie parameter name: __Host-openbot-session