Base URL
Authentication
Three credential families:
The single rule:
X-Team-ID is only for JWTs. Sending it with a
sk- or dk- credential has no effect — the team is read from the
credential row.
See Generate an API key for the sk-
issuance flow; Credentials for the
full family reference.
Surfaces
The endpoint listing is grouped by OpenAPI tag (Auth, Team, Workflow, Task, Webhook, Container, etc.). Three logical surfaces span those tags:- Management — list and modify team resources. Requires either a
user JWT (with
X-Team-ID) or a device credentialdk-. Most of the endpoints under tags like Team, Member, Workflow, Webhook fall here. - Runtime (
/r/...) — submit and observe tasks. Accepts JWT,sk-, ordk-. The path you’ll hit most from scripts and CI. - MCP (
/api/v1/mcp) — Streamable HTTP MCP endpoint that wraps runtime operations as MCP tools. Acceptssk-only. Full reference: Cloud MCP.
Pagination
List endpoints takecurrent_page (default 1) and per_page
(default 20, max 100) query parameters. Responses include a
page_meta block with current_page, per_page, and
total_count.
Task lifecycle
Every task moves through these states:completed, failed, and cancelled are terminal — the task won’t
move past them. See Stream task events (SSE)
for following state transitions in real time.
Status codes
Submitting a task returns202 Accepted with the task ID — the work
runs asynchronously, so poll or stream for the outcome. Other reads
and writes return 200 OK on success.
Errors are JSON with a single error_message field:
What to read next
Quickstart
Submit a task, stream events, fetch the output — three calls,
three languages.
Generate an API key
Issue an
sk- credential and call your first endpoint.Stream task events (SSE)
Event-type reference, fields, and polling fallback.
Upload input files
Three-step presigned upload flow for workflows that take files.
Call a container service
Reach long-running services hosted on your team’s agents.
Cloud MCP
Streamable HTTP endpoint with 15 tools that wrap the
runtime API.
Use the CLI
These endpoints are wrapped by the
cyberun CLI — drive the
runtime API from your shell instead of raw HTTP.