REST — /api/federation
25 route handlers under /api/federation · 25 public (auth-optional).
Public flags are cross-referenced against
PUBLIC_API_PREFIXESinsrc/lib/route-access.ts. Routes without a public prefix require an authenticated session (or, where applicable, a signed federation request). See Auth models.
| Route | Methods | Access | Description |
|---|---|---|---|
/api/federation/connect/onboarding | POST | Public | account, so it is the only instance that may create one or mint an onboarding |
/api/federation/connect/payout | POST | Public | authority. A sovereign instance (e.g. Spirit) whose job payout must reach a |
/api/federation/discover | GET | Public | - Resolve an identity cue (email, handle, persona id, node id, or domain) |
/api/federation/email/send | POST | Public | - Let a trusted peer Rivr instance delegate outbound transactional |
/api/federation/entity-status | POST | Public | Federation entity-status probe — the ORIGIN half of the reconciliation lane |
/api/federation/events | GET | Public | GET /api/federation/events?since={sequence}&limit={limit} |
/api/federation/events/export | POST | Public | - Queues and returns exportable federation events for the authenticated local node. |
/api/federation/events/import | POST | Public | - Ingests event batches from a peer into the authenticated local node context. |
/api/federation/manifest | GET | Public | Manifest expiry: 30 days from issuance. |
/api/federation/mutations | POST | Public | F4 — sender-node Ed25519 signature over the mutation envelope |
/api/federation/node-status | GET | Public | Node-level federation status for this instance, consumed by the post composer |
/api/federation/peers | POST PATCH | Public | - Accepts authenticated requests to connect/register a peer node relationship. |
/api/federation/query | GET | Public | Maximum resources returned per query to prevent oversized responses. |
/api/federation/registry | GET POST OPTIONS | Public | GET /api/federation/registry |
/api/federation/registry/[agentId] | GET | Public | UUID v1–v5 validation pattern. |
/api/federation/remote-auth | POST | Public | - Accept a signed SSO assertion minted by the global identity authority |
/api/federation/remote-password/verify | POST | Public | Server-to-server credential verification for a locally-homed account. |
/api/federation/signup | POST | Public | Federation signup endpoint — sovereign instances delegate new-account |
/api/federation/sso/issue | POST | Public | - Accept an email-or-handle + password (or, in a later revision, a |
/api/federation/sso/land | GET | Public | Federation SSO landing consumer: the sovereign side of the global→home |
/api/federation/sso/session-handoff | GET | Public | - When global redirects a sovereign-homed user to their home instance |
/api/federation/status | GET | Public | — |
/api/federation/stripe/checkout | POST | Public | Stripe PLATFORM. Sovereign instances hold Stripe CONNECT accounts, so they |
/api/federation/stripe/refund | POST | Public | so it is the only instance that may create a refund. |
/api/federation/users/search | GET | Public | - Let a peer app (e.g. Spirit / rivr-group, rivr-locale-commons, etc.) |