The API owns identity, workspaces, projects, release trust, enrollment, rooms, events, artifacts, review, revocation, audit, package security, harness work queues, and admin security surfaces.
referenceAPI consumers and platform developersVerified 2026-07-09
Route Groups
Group
Representative Routes
Identity
GET /identity/session, POST /identity/register/options, POST /identity/login/verify
OAuth
GET /identity/oauth/:provider/start, GET /identity/oauth/:provider/callback
Workspaces
GET /workspaces, POST /workspaces, GET /workspaces/:workspaceId
Rooms
GET /workspaces/:workspaceId/rooms, POST /workspaces/:workspaceId/rooms, PATCH /rooms/:roomId/policy
Events
POST /workspaces/:workspaceId/rooms/:roomId/events, GET /workspaces/:workspaceId/rooms/:roomId/events
Artifacts
POST /events/:eventId/artifacts, GET /workspaces/:workspaceId/artifacts/:artifactId/content
Review
GET /workspaces/:workspaceId/rooms/:roomId/review, POST /review/decisions
Projects
GET /projects, POST /projects, defaults, progress, decisions, handoff, scope, IDE, and scans
Harness Tasks
GET /workspaces/:workspaceId/harness-tasks, POST /workspaces/:workspaceId/harness-tasks/select, PATCH /workspaces/:workspaceId/harness-tasks/:kind/:id, POST /complete, POST /test, POST /test-all, POST /sandbox-sessions, GET/POST /harness-sandbox-sessions/:sessionId
Package Security
GET /package-security/summary, GET /package-security/findings, POST /admin/package-security/scans
Admin
GET /admin/security, GET /admin/audit, POST /admin/revocations
Harness Task Permissions
Action
Required Access
List harness tasks and sandbox session status
workspace.read
Select, edit, complete, test, test-all, and stop loop tasks
review.decide plus active room membership
Select a project task into a loop workitem
review.decide plus workspace.admin, room membership, outcome contract, harness instance, and command profile IDs
Edit, complete, or open sandbox for project tasks
workspace.admin
Run tests through command profiles
review.decide and command profiles already allowed on the loop workitem