Skip to documentation

API & MCP

API reference

Every operation of the eli.ai public REST API, rendered live from /api/v1/openapi.json — an OpenAPI 3.1 document you can also feed to codegen or an API client.

Prefer to try calls live? Open the API playground — same spec, editable requests, real responses.

Authentication

Send either a workspace service key (eli_sk_...) or a delegated user key (eli_uk_...) as Authorization: Bearer <key>. The eight scopes are agents:run, runs:read, kb:read, kb:write, data:read, data:run, reports:read, and reports:write. Workspace keys carry one fixed workspace. User keys are narrowed on every request by the owner's live membership/capabilities; pass X-Workspace-Id when the grant is not an unambiguous singleton. Browser-session mutation routes use the same server-owned capability manifest rather than trusting client role claims. See Authentication for the full selection and revocation rules. The application deliberately has no general request-rate limiter; place one at the ingress/API gateway and keep the built-in model-spend and schedule admission controls enabled.