Skip to main content
The Cyberun API is the HTTP surface of the platform. Every client — Cloud, Studio, the CLI, partner integrations, the MCP server — calls these endpoints. The endpoint pages under Endpoints are auto-generated from the platform’s OpenAPI spec — only the public, user-facing surface.

Base URL

Self-hosted deployments use their own domain. Everything below this prefix follows the same auth rules.

Authentication

Three credential families: The single rule: X-Team-ID is only for JWTs. Sending it with a sk- or dk- credential has no effect — the team is read from the credential row. See Generate an API key for the sk- issuance flow; Credentials for the full family reference.

Surfaces

The endpoint listing is grouped by OpenAPI tag (Auth, Team, Workflow, Task, Webhook, Container, etc.). Three logical surfaces span those tags:
  • Management — list and modify team resources. Requires either a user JWT (with X-Team-ID) or a device credential dk-. Most of the endpoints under tags like Team, Member, Workflow, Webhook fall here.
  • Runtime (/r/...) — submit and observe tasks. Accepts JWT, sk-, or dk-. The path you’ll hit most from scripts and CI.
  • MCP (/api/v1/mcp) — Streamable HTTP MCP endpoint that wraps runtime operations as MCP tools. Accepts sk- only. Full reference: Cloud MCP.

Pagination

List endpoints take current_page (default 1) and per_page (default 20, max 100) query parameters. Responses include a page_meta block with current_page, per_page, and total_count.

Task lifecycle

Every task moves through these states: completed, failed, and cancelled are terminal — the task won’t move past them. See Stream task events (SSE) for following state transitions in real time.

Status codes

Submitting a task returns 202 Accepted with the task ID — the work runs asynchronously, so poll or stream for the outcome. Other reads and writes return 200 OK on success. Errors are JSON with a single error_message field:

Quickstart

Submit a task, stream events, fetch the output — three calls, three languages.

Generate an API key

Issue an sk- credential and call your first endpoint.

Stream task events (SSE)

Event-type reference, fields, and polling fallback.

Upload input files

Three-step presigned upload flow for workflows that take files.

Call a container service

Reach long-running services hosted on your team’s agents.

Cloud MCP

Streamable HTTP endpoint with 15 tools that wrap the runtime API.

Use the CLI

These endpoints are wrapped by the cyberun CLI — drive the runtime API from your shell instead of raw HTTP.