Production gateway OAuth 2.1 · scoped keys JSON · UTF-8

API Reference

Programmatic access to workspace orchestration, connector registry, and delivery webhooks. All timestamps are returned in UTC (ISO-8601).

Base URL https://api.alania-go.ru/v2

Authentication

Exchange a client id and secret for a short-lived bearer token. Include Authorization: Bearer <access_token> on every request. Rotating API keys are available under Org → Developer → Keys in the console (not shown here).

POST /v2/auth/token
Client credentials grant. Returns access_token, expires_in, and scope.
POST /v2/auth/token/revoke
Invalidate the active session and propagate revocation to edge caches within ~60s.

Pagination & filters

List endpoints accept cursor (opaque), limit (max 100), and optional sort / filter[field] query pairs. Rate limits are applied per org and key tier.

Core platform

GET /v2/health
Liveness and dependency checks (database, queue, object storage).
GET /v2/orgs/{org_id}/workspaces
Paginated list of workspaces with role hints for the caller.
POST /v2/orgs/{org_id}/workspaces
Provision a workspace; idempotent on Idempotency-Key header.
PATCH /v2/workspaces/{workspace_id}/settings
Update retention, regions, and feature flags (requires workspace:admin).

Integrations

GET /v2/integrations/catalog
Available connectors with schema version and required OAuth scopes.
POST /v2/integrations/{connector_id}/bindings
Attach a connector instance to a workspace; async validation job returned in 202.
GET /v1/integrations/sync/runs/{run_id}
Poll incremental sync status and per-entity error breakdown.

Webhooks

POST /v2/webhooks/endpoints
Register HTTPS endpoint; signing secret returned once.
GET /v2/webhooks/deliveries
Search delivery attempts with filters on status code and event type.

Org administration

GET /v2/orgs/{org_id}/members
Members, roles, and last active timestamps.
DELETE /v2/orgs/{org_id}/keys/{key_id}
Revoke API key; audit entry emitted to SIEM if configured.
Changelog & SDKs OpenAPI 3.1 bundle and typed clients (Go, TypeScript) are distributed to verified partners through the private registry. Breaking changes are announced with a 90-day deprecation window.