API reference

The sidecar exposes a local REST API on http://127.0.0.1:5099, defined by contract/openapi.yaml (OpenAPI 3.1, ~90 endpoints). That contract is the single source of truth — both the C# sidecar and the Rust client’s types are generated from it.

Open the interactive API reference

What’s in it

• Auth & health — /health, /auth/signin, /auth/signout, tenant /profiles.
• Sync & time-machine — /sync, /audit, /drift, /snapshots, /objects, /preview-diff.
• Bulk — /export, /import, /baselines.
• Management surfaces — list/get/create/update/delete for each resource type (/apps, /device-configs, /compliance-policies, /settings-catalog, …).

Local only

This API is served on loopback by your own sidecar — it isn’t a hosted/public endpoint. The reference is here so you can see the exact request and response shapes.