/v1/.
Authentication
| Caller | Auth mode |
|---|---|
| Human web app | Session cookie |
| Agent | Authorization: Bearer ft_... |
| OAuth MCP client | OAuth 2.1 flow, then agent-scoped internal token |
List response envelope
Every list endpoint returns the same envelope:items is always present. Other fields appear when the endpoint has that metadata.
Example agent completion
Error envelope
Errors use a stable JSON envelope:code and structured details when building clients.
OpenAPI contract
Every Fortress REST endpoint is described by a single OpenAPI 3.1 document generated directly from the route definitions. Use it to:- Generate typed clients in any language.
- Validate requests and responses in your own code.
- Power editor tooling and API explorers.
Fetch the live contract
GET /openapi.json returns the contract for the running server, including request schemas, response schemas, and auth metadata.

