REST — /api/federation
20 route handlers under /api/federation · 20 public (auth-optional).
Public flags are cross-referenced against
PUBLIC_API_PREFIXESinsrc/lib/route-access.ts. Routes without a public prefix require an authenticated session (or, where applicable, a signed federation request). See Auth models.
| Route | Methods | Access | Description |
|---|---|---|---|
/api/federation/discover | GET | Public | - Resolve an identity cue (email, handle, persona id, node id, or domain) |
/api/federation/email/send | POST | Public | - Let a trusted peer Rivr instance delegate outbound transactional |
/api/federation/events | GET | Public | GET /api/federation/events?since={sequence}&limit={limit} |
/api/federation/events/export | POST | Public | - Queues and returns exportable federation events for the authenticated local node. |
/api/federation/events/import | POST | Public | - Ingests event batches from a peer into the authenticated local node context. |
/api/federation/manifest | GET | Public | Manifest expiry: 30 days from issuance. |
/api/federation/mutations | POST | Public | F4 — sender-node Ed25519 signature over the mutation envelope |
/api/federation/node-status | GET | Public | Node-level federation status for this instance, consumed by the post composer |
/api/federation/peers | POST | Public | - Accepts authenticated requests to connect/register a peer node relationship. |
/api/federation/query | GET | Public | Maximum resources returned per query to prevent oversized responses. |
/api/federation/registry | GET POST OPTIONS | Public | GET /api/federation/registry |
/api/federation/registry/[agentId] | GET | Public | UUID v1–v5 validation pattern. |
/api/federation/remote-auth | POST | Public | - Accept a signed SSO assertion minted by the global identity authority |
/api/federation/remote-password/verify | POST | Public | Server-to-server credential verification for a locally-homed account. |
/api/federation/signup | POST | Public | Federation signup endpoint — sovereign instances delegate new-account |
/api/federation/sso/issue | POST | Public | - Accept an email-or-handle + password (or, in a later revision, a |
/api/federation/sso/land | GET | Public | Federation SSO landing consumer: the sovereign side of the global→home |
/api/federation/sso/session-handoff | GET | Public | - When global redirects a sovereign-homed user to their home instance |
/api/federation/status | GET | Public | — |
/api/federation/users/search | GET | Public | - Let a peer app (e.g. Spirit / rivr-group, rivr-locale-commons, etc.) |