Reference · Public protocol · OpenAPI 3.1

HTTP and OpenAPI

Call Receiz public proof routes directly and inspect the exact OpenAPI contract. Public verification stays open; scoped production operations declare their authentication boundary.

Stable route: /reference/http-openapi
Version: v124 contract
Source SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5

Solved outcome

What this enables

Move from a protocol route to a verified proof object without treating a response, token, server, session, or publication order as artifact or Offline Note authority.

Exact form

Signature or request

OpenAPI 2026-08-22.v124 · 105 operations · 179 schemas

Inputs

Inputs and constraints

multipart/form-data for sealing and verification routes.
Exact request schema from OpenAPI version 2026-08-22.v124.
No account for public proof verification.

Outputs

Output and receipt

OpenAPI 3.1.0 document
Sealed artifact bytes
Deterministic verification result

Stable recovery

Failures

No stable code declared

No stable failure code is declared by this exact source. Use the named request/response schemas and operation status; independently verify returned artifact bytes.

app/lib/developers/openapiSpec.ts · 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5

Offline

Offline behavior

HTTP transports, verifies, or publishes only its declared operations. Downloaded sealed bytes remain independently verifiable offline; for Offline Notes, the verified receiz.account.state.v3 source, local Reserve-debit and held-bound genesis successors, qualified exact-head consumption, and receiver activation establish the complete local lifecycle without HTTP. A later response cannot gate release, authorize issuance, select the successor, or establish Settlement.

Authority

Truth boundary

Begin with exact held artifact bytes and local verification. SDK, HTTP, MCP, AI, framework, server, session, and UI mechanics may transport, coordinate, inspect, or distribute beneath the sealed Receiz proof object. They do not become proof authority.

The enclosing sealed Receiz proof object and its exact bytes are the stronger source of truth.Record Moment and Seal File are independent local operations after one-time anonymous Signature V4 device enrollment. Neither requires an account or server signer. Identity and account continuity remain optional projections beneath public verification.

Installed inventory

105 exact HTTP operations

GET /.well-known/oauth-authorization-serverv2026-08-22.v124

GET /.well-known/oauth-authorization-server
Auth: No Auth
Request: No request body
Response: OidcDiscoveryMetadata

Discovery: OAuth authorization-server metadata for Receiz Connect clients. OAuth authorization-server metadata for Receiz Connect clients. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /.well-known/openid-configurationv2026-08-22.v124

GET /.well-known/openid-configuration
Auth: No Auth
Request: No request body
Response: OidcDiscoveryMetadata

Discovery: OIDC discovery document for Receiz Connect clients. OIDC discovery document for Receiz Connect clients. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/document-sealv2026-08-22.v124

POST /api/document-seal
Auth: No Auth
Request: DocumentSealRequest
Response: DocumentSealResponseMetadata

Verification: Create an integrity-only seal; this route does not create a verified proof object. Create an integrity-only seal; this route does not create a verified proof object. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/document-verifyv2026-08-22.v124

POST /api/document-verify
Auth: No Auth
Request: DocumentVerifyRequest
Response: DocumentVerifyResponse

Verification: Verify sealed files and package artifacts deterministically. Verify sealed files and package artifacts deterministically. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/receizv2026-08-22.v124

GET /api/receiz
Auth: No Auth
Request: No request body
Response: ReceizApiResponse

Verification: Legacy Receiz mint/record surface for compatible integrations. Legacy Receiz mint/record surface for compatible integrations. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/assets/sealv2026-08-22.v124

POST /api/sdk/v1/assets/seal
Auth: Authenticated
Request: DocumentSealRequest
Response: DocumentSealResponseMetadata

Verification: Create the authenticated owner's native Receiz Record before sealing the source bytes at the same coordinates. Create the authenticated owner's native Receiz Record before sealing the source bytes at the same coordinates. Receiz contract: Authenticated; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/verification/conformancev2026-08-22.v124

GET /api/verification/conformance
Auth: No Auth
Request: No request body
Response: ReceizApiResponse

Verification: Publish live verification conformance report with source/runtime controls and revision anchors. Publish live verification conformance report with source/runtime controls and revision anchors. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/verifyv2026-08-22.v124

POST /api/verify
Auth: No Auth
Request: GenericReceizRequest
Response: ReceizApiResponse

Verification: Verify claim coordinates and return canonical verdict envelopes. Verify claim coordinates and return canonical verdict envelopes. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/auth/receiz-id/continuev2026-08-22.v124

POST /api/auth/receiz-id/continue
Auth: No Auth
Request: ReceizIdContinueRequest
Response: ReceizIdContinueResponse

Identity: Receiz ID proof publication endpoint for SDK-created or artifact-restored identities; signed key proof is required and Connect remains delegated API access after identity proof. Receiz ID proof publication endpoint for SDK-created or artifact-restored identities; signed key proof is required and Connect remains delegated API access after identity proof. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/login/bootstrap/{username}v2026-08-22.v124

GET /api/connect/login/bootstrap/{username}
Auth: No Auth
Request: No request body
Response: ReceizApiResponse

Identity: Username-based login bootstrap surface returning OIDC launch configuration for copy-paste login embeds. Username-based login bootstrap surface returning OIDC launch configuration for copy-paste login embeds. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

DELETE /api/oidc/agent-tokensv2026-08-22.v124

DELETE /api/oidc/agent-tokens
Auth: Authenticated
Request: OidcAgentTokenRequest
Response: OidcAgentTokenResponse

Identity: Create and revoke scoped delegated agent tokens for MCP, CI, and trusted local developer agents. Tokens are shown once and carry audit labels. Create and revoke scoped delegated agent tokens for MCP, CI, and trusted local developer agents. Tokens are shown once and carry audit labels. Receiz contract: Authenticated; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/oidc/agent-tokensv2026-08-22.v124

POST /api/oidc/agent-tokens
Auth: Authenticated
Request: OidcAgentTokenRequest
Response: OidcAgentTokenResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/oidc/authorizev2026-08-22.v124

GET /api/oidc/authorize
Auth: No Auth
Request: No request body
Response: OidcResponse

Identity: OIDC Authorization Code + PKCE authorization endpoint. OIDC Authorization Code + PKCE authorization endpoint. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/oidc/introspectv2026-08-22.v124

POST /api/oidc/introspect
Auth: OAuth Client Auth
Request: OidcTokenForm
Response: OidcIntrospectionResponse

Identity: OAuth token introspection endpoint for backend trust decisions. OAuth token introspection endpoint for backend trust decisions. Receiz contract: OAuth Client Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/oidc/jwksv2026-08-22.v124

GET /api/oidc/jwks
Auth: No Auth
Request: No request body
Response: OidcJwksResponse

Identity: JWKS publication endpoint for OIDC token verification. JWKS publication endpoint for OIDC token verification. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/oidc/revokev2026-08-22.v124

POST /api/oidc/revoke
Auth: OAuth Client Auth
Request: OidcTokenForm
Response: OidcRevocationResponse

Identity: OAuth token revocation endpoint (RFC 7009 behavior). OAuth token revocation endpoint (RFC 7009 behavior). Receiz contract: OAuth Client Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/oidc/tokenv2026-08-22.v124

POST /api/oidc/token
Auth: OAuth Client Auth
Request: OidcTokenForm
Response: OidcTokenResponse

Identity: OIDC token exchange and refresh token rotation endpoint. OIDC token exchange and refresh token rotation endpoint. Receiz contract: OAuth Client Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/oidc/userinfov2026-08-22.v124

GET /api/oidc/userinfo
Auth: Bearer Access Token
Request: GenericReceizRequest
Response: OidcUserinfoResponse

Identity: OpenID user claims endpoint scoped by issued access tokens. OpenID user claims endpoint scoped by issued access tokens. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/oidc/userinfov2026-08-22.v124

POST /api/oidc/userinfo
Auth: Bearer Access Token
Request: GenericReceizRequest
Response: OidcUserinfoResponse

Identity: OpenID user claims endpoint scoped by issued access tokens. OpenID user claims endpoint scoped by issued access tokens. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/payments/checkoutv2026-08-22.v124

POST /api/connect/payments/checkout
Auth: Bearer Access Token
Request: CheckoutRequest
Response: CheckoutSessionResponse

Connect: Create delegated checkout sessions for merchant payments (`receiz:payments.create`). Create delegated checkout sessions for merchant payments (`receiz:payments.create`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/payments/notes/{noteId}/downloadv2026-08-22.v124

GET /api/connect/payments/notes/{noteId}/download
Auth: Bearer Access Token
Request: No request body
Response: WalletNoteDownloadResponse

Connect: Download delegated offline payment note artifacts (`receiz:notes.read`). Download delegated offline payment note artifacts (`receiz:notes.read`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/payments/notes/claimv2026-08-22.v124

POST /api/connect/payments/notes/claim
Auth: Bearer Access Token
Request: GenericReceizRequest
Response: WalletNoteResponse

Connect: Claim delegated offline payment notes into wallet balance (`receiz:notes.claim`). Claim delegated offline payment notes into wallet balance (`receiz:notes.claim`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/payments/notes/mintv2026-08-22.v124

POST /api/connect/payments/notes/mint
Auth: Bearer Access Token
Request: GenericReceizRequest
Response: WalletNoteResponse

Connect: Mint delegated offline payment notes from wallet balance (`receiz:notes.mint`). Mint delegated offline payment notes from wallet balance (`receiz:notes.mint`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/payments/sessionv2026-08-22.v124

GET /api/connect/payments/session
Auth: Bearer Access Token
Request: No request body
Response: CheckoutSessionStatusResponse

Connect: Read delegated checkout session payment status (`receiz:payments.read`). Read delegated checkout session payment status (`receiz:payments.read`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/recordv2026-08-22.v124

POST /api/connect/record
Auth: Bearer Access Token
Request: GenericReceizRequest
Response: ReceizApiResponse

Connect: Delegated record action (`receiz:record`) on behalf of users. Delegated record action (`receiz:record`) on behalf of users. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/sealv2026-08-22.v124

POST /api/connect/seal
Auth: Bearer Access Token
Request: GenericReceizRequest
Response: ReceizApiResponse

Connect: Delegated integrity-only seal action (`receiz:seal`); proof objects use the authenticated SDK asset seal route. Delegated integrity-only seal action (`receiz:seal`); proof objects use the authenticated SDK asset seal route. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/transfersv2026-08-22.v124

POST /api/connect/transfers
Auth: Bearer Access Token
Request: ConnectTransferRequest
Response: ConnectTransferResponse

Connect: Execute delegated wallet transfers (`receiz:wallet.transfer`). Execute delegated wallet transfers (`receiz:wallet.transfer`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/twin/approvalv2026-08-22.v124

GET /api/connect/twin/approval
Auth: Bearer Access Token
Request: TwinPromotionApprovalInput
Response: TwinApprovalResponse

Connect: Read or approve delegated public Twin promotion where the owner has automation entitlement (`receiz:twin.read`, `receiz:twin.write`). Read or approve delegated public Twin promotion where the owner has automation entitlement (`receiz:twin.read`, `receiz:twin.write`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/twin/approvalv2026-08-22.v124

POST /api/connect/twin/approval
Auth: Bearer Access Token
Request: TwinPromotionApprovalInput
Response: TwinApprovalResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/twin/market/intentsv2026-08-22.v124

GET /api/connect/twin/market/intents
Auth: Bearer Access Token
Request: CreateTwinMarketIntentInput
Response: TwinMarketIntentsResponse

Connect: Read or create delegated Market Twin intents under the user's mandate (`receiz:twin.read`, `receiz:twin.write`). Read or create delegated Market Twin intents under the user's mandate (`receiz:twin.read`, `receiz:twin.write`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/twin/market/intentsv2026-08-22.v124

POST /api/connect/twin/market/intents
Auth: Bearer Access Token
Request: CreateTwinMarketIntentInput
Response: TwinMarketIntentsResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/twin/market/intents/{intentId}/approvev2026-08-22.v124

POST /api/connect/twin/market/intents/{intentId}/approve
Auth: Bearer Access Token
Request: GenericReceizRequest
Response: TwinMarketIntentResponse

Connect: Approve a pending delegated Market Twin intent without bypassing mandate risk checks (`receiz:twin.write`). Approve a pending delegated Market Twin intent without bypassing mandate risk checks (`receiz:twin.write`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/twin/market/mandatev2026-08-22.v124

GET /api/connect/twin/market/mandate
Auth: Bearer Access Token
Request: SaveTwinMarketMandateInput
Response: TwinMarketMandateResponse

Connect: Read or update delegated Market Twin mandate settings (`receiz:twin.read`, `receiz:twin.write`). Read or update delegated Market Twin mandate settings (`receiz:twin.read`, `receiz:twin.write`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

PATCH /api/connect/twin/market/mandatev2026-08-22.v124

PATCH /api/connect/twin/market/mandate
Auth: Bearer Access Token
Request: SaveTwinMarketMandateInput
Response: TwinMarketMandateResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/twin/mind/exportv2026-08-22.v124

GET /api/connect/twin/mind/export
Auth: Bearer Access Token
Request: No request body
Response: TwinMindArtifactPng

Connect: Export a delegated Live Twin mind image artifact (`receiz:twin.read`). Export a delegated Live Twin mind image artifact (`receiz:twin.read`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/twin/mind/importv2026-08-22.v124

GET /api/connect/twin/mind/import
Auth: Bearer Access Token
Request: TwinMindImportRequest
Response: TwinMindImportSummaryResponse

Connect: Inspect or import delegated Live Twin mind artifacts after artifact signature verification (`receiz:twin.read`, `receiz:twin.write`). Inspect or import delegated Live Twin mind artifacts after artifact signature verification (`receiz:twin.read`, `receiz:twin.write`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/twin/mind/importv2026-08-22.v124

POST /api/connect/twin/mind/import
Auth: Bearer Access Token
Request: TwinMindImportRequest
Response: TwinMindImportSummaryResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/connect/verifyv2026-08-22.v124

POST /api/connect/verify
Auth: Bearer Access Token
Request: DocumentVerifyRequest
Response: DocumentVerifyResponse

Connect: Delegated verify action (`receiz:verify`) on behalf of users. Delegated verify action (`receiz:verify`) on behalf of users. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/connect/wallet/mev2026-08-22.v124

GET /api/connect/wallet/me
Auth: Bearer Access Token
Request: No request body
Response: ConnectWalletResponse

Connect: Read delegated wallet summary (`receiz:wallet.read`). Read delegated wallet summary (`receiz:wallet.read`). Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/ledger/actions/publicv2026-08-22.v124

GET /api/ledger/actions/public
Auth: No Auth
Request: No request body
Response: ActionLedgerFeed

Wallet: Public append-only global action ledger feed for auth, receiz, wallet, and identity-key events. Public append-only global action ledger feed for auth, receiz, wallet, and identity-key events. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/wallet/ledger/publicv2026-08-22.v124

GET /api/wallet/ledger/public
Auth: No Auth
Request: No request body
Response: WalletLedgerFeed

Wallet: Public wallet ledger feed exposing transfer and note events with deterministic value fields and pseudonymous actor identities. Public wallet ledger feed exposing transfer and note events with deterministic value fields and pseudonymous actor identities. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/public-proof/{id}v2026-08-22.v124

GET /api/public-proof/{id}
Auth: No Auth
Request: No request body
Response: PublicProofLookupResponse

Public Proof: Read the public proof model for a specific observed, claimed, verified, sealed, disputed, rights-scoped, or app-state projection record. Read the public proof model for a specific observed, claimed, verified, sealed, disputed, rights-scoped, or app-state projection record. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/public-proof/by-urlv2026-08-22.v124

GET /api/public-proof/by-url
Auth: No Auth
Request: No request body
Response: PublicProofLookupResponse

Public Proof: Resolve an already observed public proof record by canonical source URL. Resolve an already observed public proof record by canonical source URL. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/public-proof/creator/{externalCreatorId}v2026-08-22.v124

GET /api/public-proof/creator/{externalCreatorId}
Auth: No Auth
Request: No request body
Response: PublicProofCollectionResponse

Public Proof: Read public proof records associated with an external creator identifier. Read public proof records associated with an external creator identifier. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/public-proof/namespace/{namespace}v2026-08-22.v124

GET /api/public-proof/namespace/{namespace}
Auth: No Auth
Request: No request body
Response: PublicProofCollectionResponse

Public Proof: Read public app-state projection records associated with a namespace, tenant, subdomain, or custom domain. Read public app-state projection records associated with a namespace, tenant, subdomain, or custom domain. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/public-proof/observev2026-08-22.v124

POST /api/public-proof/observe
Auth: No Auth
Request: GenericReceizRequest
Response: PublicProofObserveResponse

Public Proof: Observe a public URL and create a metadata-only public proof trail without hosting the original work. Observe a public URL and create a metadata-only public proof trail without hosting the original work. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

OPTIONS /api/public-proof/registry/feedv2026-08-22.v124

OPTIONS /api/public-proof/registry/feed
Auth: Bearer Access Token
Request: ReceizAppStateFeed
Response: PublicProofRegistryFeedResponse

Public Proof: Publish durable public app-state projections with delegated `receiz:record` authority; signed partner registry feeds remain supported. Publish durable public app-state projections with delegated `receiz:record` authority; signed partner registry feeds remain supported. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/public-proof/registry/feedv2026-08-22.v124

POST /api/public-proof/registry/feed
Auth: Bearer Access Token
Request: ReceizAppStateFeed
Response: PublicProofRegistryFeedResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/payments/embed/checkoutv2026-08-22.v124

POST /api/payments/embed/checkout
Auth: No Auth
Request: CheckoutRequest
Response: CheckoutSessionResponse

Payments: Create embedded or hosted checkout sessions that settle directly to a target Receiz username wallet. Create embedded or hosted checkout sessions that settle directly to a target Receiz username wallet. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/payments/embed/note-claimv2026-08-22.v124

POST /api/payments/embed/note-claim
Auth: No Auth
Request: GenericReceizRequest
Response: NoteClaimResponse

Payments: Accept uploaded note artifacts (or note tokens) and claim value directly into a target Receiz username wallet. Accept uploaded note artifacts (or note tokens) and claim value directly into a target Receiz username wallet. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/signal-run/cards/{cardId}/auctionv2026-08-22.v124

GET /api/game/signal-run/cards/{cardId}/auction
Auth: No Auth
Request: GenericReceizRequest
Response: SignalCircuitResponse

Signal And Sports: Read live Signal Circuit Card auction terms and append session-gated owner auction actions or verified bid records. Read live Signal Circuit Card auction terms and append session-gated owner auction actions or verified bid records. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/game/signal-run/cards/{cardId}/auctionv2026-08-22.v124

POST /api/game/signal-run/cards/{cardId}/auction
Auth: No Auth
Request: GenericReceizRequest
Response: SignalCircuitResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/signal-run/cards/{cardId}/purchasev2026-08-22.v124

GET /api/game/signal-run/cards/{cardId}/purchase
Auth: No Auth
Request: No request body
Response: SignalCircuitResponse

Signal And Sports: Read active public sale terms for a Signal Circuit Card before session-gated reserve, note, or card checkout execution. Read active public sale terms for a Signal Circuit Card before session-gated reserve, note, or card checkout execution. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/signal-run/cards/{cardId}/share-imagev2026-08-22.v124

GET /api/game/signal-run/cards/{cardId}/share-image
Auth: No Auth
Request: No request body
Response: SignalCircuitResponse

Signal And Sports: Render the public Signal Circuit Card share image from sealed card claim, record, artwork, scarcity, and listing truth. Render the public Signal Circuit Card share image from sealed card claim, record, artwork, scarcity, and listing truth. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/game/signal-run/cards/artv2026-08-22.v124

POST /api/game/signal-run/cards/art
Auth: No Auth
Request: GenericReceizRequest
Response: SignalCircuitResponse

Signal And Sports: Generate or retrieve Signal Circuit Card art for a verified card claim with deterministic fallback rendering. Generate or retrieve Signal Circuit Card art for a verified card claim with deterministic fallback rendering. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/signal-run/cards/art-imagev2026-08-22.v124

GET /api/game/signal-run/cards/art-image
Auth: No Auth
Request: No request body
Response: SignalCircuitResponse

Signal And Sports: Serve immutable stored Signal Circuit Card artwork by card ID and claim hash for deterministic first paint. Serve immutable stored Signal Circuit Card artwork by card ID and claim hash for deterministic first paint. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/signal-run/cards/battle-requestv2026-08-22.v124

GET /api/game/signal-run/cards/battle-request
Auth: Authenticated
Request: GenericReceizRequest
Response: SignalCircuitResponse

Signal And Sports: Read live Signal Arena request queues, append Signal Circuit Card fight requests, and accept or decline head-to-head card, XP, money, or fun battles. Read live Signal Arena request queues, append Signal Circuit Card fight requests, and accept or decline head-to-head card, XP, money, or fun battles. Receiz contract: Authenticated; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

PATCH /api/game/signal-run/cards/battle-requestv2026-08-22.v124

PATCH /api/game/signal-run/cards/battle-request
Auth: Authenticated
Request: GenericReceizRequest
Response: SignalCircuitResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/game/signal-run/cards/battle-requestv2026-08-22.v124

POST /api/game/signal-run/cards/battle-request
Auth: Authenticated
Request: GenericReceizRequest
Response: SignalCircuitResponse

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/game/signal-run/cards/battle-settingsv2026-08-22.v124

POST /api/game/signal-run/cards/battle-settings
Auth: Authenticated
Request: GenericReceizRequest
Response: SignalCircuitResponse

Signal And Sports: Let a card owner opt a verified Vault card into or out of AI twin battle defense. Let a card owner opt a verified Vault card into or out of AI twin battle defense. Receiz contract: Authenticated; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/signal-run/cards/discoveryv2026-08-22.v124

GET /api/game/signal-run/cards/discovery
Auth: No Auth
Request: No request body
Response: SignalCircuitResponse

Signal And Sports: Read verified discoverable Signal Circuit Cards for swipe, world-map, market, auction, and battle discovery. Read verified discoverable Signal Circuit Cards for swipe, world-map, market, auction, and battle discovery. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/game/signal-run/cards/recordv2026-08-22.v124

POST /api/game/signal-run/cards/record
Auth: No Auth
Request: GenericReceizRequest
Response: SignalCircuitResponse

Signal And Sports: Anchor a sealed Signal Circuit Card image and metadata into the public Receiz record path. Anchor a sealed Signal Circuit Card image and metadata into the public Receiz record path. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/sports/conformancev2026-08-22.v124

GET /api/game/sports/conformance
Auth: No Auth
Request: No request body
Response: SportsConformanceResponse

Signal And Sports: Publish live Sports conformance with pack odds, rarity gates, MLB registry issuance, arena entry, provenance, funding, and source digest evidence. Publish live Sports conformance with pack odds, rarity gates, MLB registry issuance, arena entry, provenance, funding, and source digest evidence. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/sports/conformance/badgev2026-08-22.v124

GET /api/game/sports/conformance/badge
Auth: No Auth
Request: No request body
Response: ConformanceBadgeResponse

Signal And Sports: Embed the live Sports conformance badge. Embed the live Sports conformance badge. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/sports/conformance/historyv2026-08-22.v124

GET /api/game/sports/conformance/history
Auth: No Auth
Request: No request body
Response: ConformanceHistoryResponse

Signal And Sports: Read Sports conformance snapshot history. Read Sports conformance snapshot history. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/game/sports/conformance/history/rollupsv2026-08-22.v124

GET /api/game/sports/conformance/history/rollups
Auth: No Auth
Request: No request body
Response: ConformanceRollupsResponse

Signal And Sports: Read Sports conformance daily rollup evidence. Read Sports conformance daily rollup evidence. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/signal-circuit/conformancev2026-08-22.v124

GET /api/signal-circuit/conformance
Auth: No Auth
Request: No request body
Response: SignalCircuitConformanceResponse

Signal And Sports: Publish live Signal Circuit conformance with claim-to-code checks, source digests, scarcity evidence, and revision anchors. Publish live Signal Circuit conformance with claim-to-code checks, source digests, scarcity evidence, and revision anchors. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/signal-circuit/conformance/badgev2026-08-22.v124

GET /api/signal-circuit/conformance/badge
Auth: No Auth
Request: No request body
Response: ConformanceBadgeResponse

Signal And Sports: Embed the live Signal Circuit conformance badge. Embed the live Signal Circuit conformance badge. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/signal-circuit/conformance/historyv2026-08-22.v124

GET /api/signal-circuit/conformance/history
Auth: No Auth
Request: No request body
Response: ConformanceHistoryResponse

Signal And Sports: Read signed Signal Circuit conformance snapshot history. Read signed Signal Circuit conformance snapshot history. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/signal-circuit/conformance/history/rollupsv2026-08-22.v124

GET /api/signal-circuit/conformance/history/rollups
Auth: No Auth
Request: No request body
Response: ConformanceRollupsResponse

Signal And Sports: Read Signal Circuit conformance daily rollup evidence. Read Signal Circuit conformance daily rollup evidence. Receiz contract: No Auth; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/signal-circuit/conformance/simulationv2026-08-22.v124

GET /api/signal-circuit/conformance/simulation
Auth: No Auth
Request: No request body
Response: SignalCircuitSimulationResponse

Signal And Sports: Run a bounded deterministic Signal Circuit odds simulation with seed replay, output hash, and source digest proof. Run a bounded deterministic Signal Circuit odds simulation with seed replay, output hash, and source digest proof. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/world/profile/{username}v2026-08-22.v124

GET /api/world/profile/{username}
Auth: No Auth
Request: No request body
Response: WorldPublicResponse

World: Load a profile's Live Twin surface, public world profile, availability preview, and visitor thread context. Load a profile's Live Twin surface, public world profile, availability preview, and visitor thread context. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/world/profile/{username}v2026-08-22.v124

POST /api/world/profile/{username}
Auth: No Auth
Request: GenericReceizRequest
Response: WorldPublicResponse

World: Send a visitor message to a Live Twin or request booking through the public profile surface, subject to policy and rate limits. Send a visitor message to a Live Twin or request booking through the public profile surface, subject to policy and rate limits. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/world/profile/{username}/streamv2026-08-22.v124

POST /api/world/profile/{username}/stream
Auth: No Auth
Request: GenericReceizRequest
Response: WorldPublicResponse

World: Stream Live Twin updates for live retrieval, message continuity, and incremental public profile responses. Stream Live Twin updates for live retrieval, message continuity, and incremental public profile responses. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/world/publicv2026-08-22.v124

GET /api/world/public
Auth: No Auth
Request: No request body
Response: WorldPublicResponse

World: Read the public Receiz World snapshot with open districts, featured ventures, and world-level discovery surfaces. Read the public Receiz World snapshot with open districts, featured ventures, and world-level discovery surfaces. Receiz contract: No Auth; audience: Both.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/sdk/v1/auth/granted-scopesv2026-08-22.v124

GET /api/sdk/v1/auth/granted-scopes
Auth: Bearer Access Token
Request: No request body
Response: GrantedScopesResponse

Universal Runtime: Introspect the exact OAuth/OIDC scopes granted to the current application authority. Introspect the exact OAuth/OIDC scopes granted to the current application authority. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/domains/verified-additionsv2026-08-22.v124

POST /api/sdk/v1/domains/verified-additions
Auth: Bearer Access Token
Request: V124VerifiedReplayRequest
Response: V124SignedDomainReplayEnvelope

Universal Runtime: Return request-bound authenticated additions after an exact domain head; SDK verification is required before application callbacks receive them. Return request-bound authenticated additions after an exact domain head; SDK verification is required before application callbacks receive them. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/domains/verified-checkpointv2026-08-22.v124

POST /api/sdk/v1/domains/verified-checkpoint
Auth: Bearer Access Token
Request: V124VerifiedCheckpointRequest
Response: V124SignedDomainCheckpointEnvelope

Universal Runtime: Return an immutable authenticated checkpoint bound to a previously verified replay head and exact namespace bytes. Return an immutable authenticated checkpoint bound to a previously verified replay head and exact namespace bytes. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/domains/verified-private-additionsv2026-08-22.v124

POST /api/sdk/v1/domains/verified-private-additions
Auth: Bearer Access Token
Request: V124VerifiedPrivateAdditionsRequest
Response: V124SignedPrivateDomainAdditionsEnvelope

Universal Runtime: Filter private additions before response construction and bind encrypted payloads to current viewer, grant, access-key, and domain heads. Filter private additions before response construction and bind encrypted payloads to current viewer, grant, access-key, and domain heads. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/domains/verified-replayv2026-08-22.v124

POST /api/sdk/v1/domains/verified-replay
Auth: Bearer Access Token
Request: V124VerifiedReplayRequest
Response: V124SignedDomainReplayEnvelope

Universal Runtime: Return closed-shape authenticated replay for exact application, domain, registry, reducer, cursor, namespace, and head expectations. Return closed-shape authenticated replay for exact application, domain, registry, reducer, cursor, namespace, and head expectations. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/sdk/v1/execution/{applicationId}/{executionId}v2026-08-22.v124

GET /api/sdk/v1/execution/{applicationId}/{executionId}
Auth: Bearer Access Token
Request: No request body
Response: V124SignedExecutionResolutionEnvelope

Universal Runtime: Resolve an immutable authenticated execution outcome by application and execution identity without replanning. Resolve an immutable authenticated execution outcome by application and execution identity without replanning. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/sdk/v1/execution/by-idempotency/{applicationId}/{domainId}/{operationKind}/{semanticIdempotencyKey}v2026-08-22.v124

GET /api/sdk/v1/execution/by-idempotency/{applicationId}/{domainId}/{operationKind}/{semanticIdempotencyKey}
Auth: Bearer Access Token
Request: No request body
Response: V124SignedExecutionResolutionEnvelope

Universal Runtime: Resolve committed, zero-write, cancelled, staged, or unknown by the exact semantic idempotency coordinates before retry. Resolve committed, zero-write, cancelled, staged, or unknown by the exact semantic idempotency coordinates before retry. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/execution/cancelv2026-08-22.v124

POST /api/sdk/v1/execution/cancel
Auth: Bearer Access Token
Request: V124ExecutionCancelRequest
Response: V124SignedExecutionCancelEnvelope

Universal Runtime: Cancel an uncommitted staged plan under the same application, session, plan, and idempotency bindings with zero domain writes. Cancel an uncommitted staged plan under the same application, session, plan, and idempotency bindings with zero domain writes. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/execution/executev2026-08-22.v124

POST /api/sdk/v1/execution/execute
Auth: Bearer Access Token
Request: V124ExecutionExecuteRequest
Response: V124SignedExecutionResolutionEnvelope

Universal Runtime: Execute one staged plan with atomic compare-and-swap across every exact participant head, or write zero everywhere. Execute one staged plan with atomic compare-and-swap across every exact participant head, or write zero everywhere. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/execution/stagev2026-08-22.v124

POST /api/sdk/v1/execution/stage
Auth: Bearer Access Token
Request: V124ExecutionStageRequest
Response: V124SignedExecutionStageEnvelope

Universal Runtime: Persist one exact canonical plan before execution and return the same authenticated handle for byte-identical staging retries. Persist one exact canonical plan before execution and return the same authenticated handle for byte-identical staging retries. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/identity/proof-authority/exchangev2026-08-22.v124

POST /api/sdk/v1/identity/proof-authority/exchange
Auth: Proof Object Consent
Request: ProofAuthorityExchangeRequest
Response: ProofAuthorityExchangeResponse

Universal Runtime: Exchange an independently verified identity proof object and explicit in-application consent for a short-lived, non-refreshable, minimum-scope authority without redirecting the person to receiz.com. Exchange an independently verified identity proof object and explicit in-application consent for a short-lived, non-refreshable, minimum-scope authority without redirecting the person to receiz.com. Receiz contract: Proof Object Consent; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/identity/public-recipient/resolvev2026-08-22.v124

POST /api/sdk/v1/identity/public-recipient/resolve
Auth: Bearer Access Token
Request: V124PublicRecipientResolutionRequest
Response: V124SignedPublicRecipientResolutionEnvelope

Universal Runtime: Resolve a consented public alias through privacy-safe rate limiting to an encrypted purpose-bound one-use locator without exposing private account coordinates. Resolve a consented public alias through privacy-safe rate limiting to an encrypted purpose-bound one-use locator without exposing private account coordinates. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/runtime/authority-sessions/closev2026-08-22.v124

POST /api/sdk/v1/runtime/authority-sessions/close
Auth: Bearer Access Token
Request: V124CloseAuthoritySessionRequest
Response: V124SignedClosedAuthoritySessionEnvelope

Universal Runtime: Close an authority session by appending its revocation; the handle never becomes identity or proof authority. Close an authority session by appending its revocation; the handle never becomes identity or proof authority. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/runtime/authority-sessions/openv2026-08-22.v124

POST /api/sdk/v1/runtime/authority-sessions/open
Auth: Bearer Access Token
Request: V124OpenAuthoritySessionRequest
Response: V124SignedActiveAuthoritySessionEnvelope

Universal Runtime: Open one short-lived server-custodied authority session after enclosing proof object verification, explicit consent, exact scope binding, and exact-head checks. Open one short-lived server-custodied authority session after enclosing proof object verification, explicit consent, exact scope binding, and exact-head checks. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/runtime/authority-sessions/refreshv2026-08-22.v124

POST /api/sdk/v1/runtime/authority-sessions/refresh
Auth: Bearer Access Token
Request: V124RefreshAuthoritySessionRequest
Response: V124SignedActiveAuthoritySessionEnvelope

Universal Runtime: Refresh an authority session only from a fresh challenge with the same application, audience, scope, proof, owner, revocation, and exact-head bindings. Refresh an authority session only from a fresh challenge with the same application, audience, scope, proof, owner, revocation, and exact-head bindings. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/runtime/qualifyv2026-08-22.v124

POST /api/sdk/v1/runtime/qualify
Auth: Bearer Access Token
Request: V124OperationalQualificationRequest
Response: V124SignedOperationalCapabilityEnvelope

Universal Runtime: Report available, degraded, or unavailable only from actual granted scopes, dependency health, and authenticated registry, reducer, service, and head evidence. Report available, degraded, or unavailable only from actual granted scopes, dependency health, and authenticated registry, reducer, service, and head evidence. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/sources/publishv2026-08-22.v124

POST /api/sdk/v1/sources/publish
Auth: Bearer Access Token
Request: V124SealedSourcePublicationRequest
Response: V124SignedSealedSourcePublicationEnvelope

Universal Runtime: Publish exact sealed proof object bytes to content-addressed V124 custody; the publication result is coordination only and never proof, identity, ownership, access, history, or head authority. Publish exact sealed proof object bytes to content-addressed V124 custody; the publication result is coordination only and never proof, identity, ownership, access, history, or head authority. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/subjects/{subjectId}/namespaces/resolvev2026-08-22.v124

POST /api/sdk/v1/subjects/{subjectId}/namespaces/resolve
Auth: Bearer Access Token
Request: SubjectNamespaceResolutionRequest
Response: SubjectNamespaceResolutionResponse

Universal Runtime: Resolve named subject namespaces at one exact authenticated head with pinned registry and reducer digests. Resolve named subject namespaces at one exact authenticated head with pinned registry and reducer digests. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/subjects/namespaces/resolvev2026-08-22.v124

POST /api/sdk/v1/subjects/namespaces/resolve
Auth: Bearer Access Token
Request: V124NamespaceResolutionRequest
Response: V124SignedNamespaceResolutionEnvelope

Universal Runtime: Resolve strict byte-exact namespace projections at authenticated subject and namespace heads without replacing the enclosing proof object. Resolve strict byte-exact namespace projections at authenticated subject and namespace heads without replacing the enclosing proof object. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/sdk/v1/value/executions/by-idempotency/{idempotencyKey}v2026-08-22.v124

GET /api/sdk/v1/value/executions/by-idempotency/{idempotencyKey}
Auth: Bearer Access Token
Request: No request body
Response: PhiValueExecutionOutcome

Universal Runtime: Recover the exact committed, zero-write, or unknown Phi execution outcome before any ambiguous retry. Recover the exact committed, zero-write, or unknown Phi execution outcome before any ambiguous retry. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/value/reserve/executev2026-08-22.v124

POST /api/sdk/v1/value/reserve/execute
Auth: Bearer Access Token
Request: PhiValueExecutionRequest
Response: PhiValueExecutionOutcome

Universal Runtime: Execute one canonical Phi Reserve intent atomically with exact heads, scoped authority, receipt, and zero-write failure. Execute one canonical Phi Reserve intent atomically with exact heads, scoped authority, receipt, and zero-write failure. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/sdk/v1/value/settlement/executev2026-08-22.v124

POST /api/sdk/v1/value/settlement/execute
Auth: Bearer Access Token
Request: PhiValueExecutionRequest
Response: PhiValueExecutionOutcome

Universal Runtime: Execute one canonical Phi Settlement intent atomically with exact heads, scoped authority, receipt, and zero-write failure. Execute one canonical Phi Settlement intent atomically with exact heads, scoped authority, receipt, and zero-write failure. Receiz contract: Bearer Access Token; audience: Developers.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/developers/creator/runv2026-08-22.v124

POST /api/developers/creator/run
Auth: Business session or scoped bearer access token
Request: CreatorProductionRunRequest
Response: ReceizApiResponse

Production: Execute a metered Creator production run. Public proof verification is open. Production Creator and Twin APIs begin with Business. Accepted production output consumes the same usage credits and settlement path as first-party execution.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/developers/twin/{username}/messagev2026-08-22.v124

POST /api/developers/twin/{username}/message
Auth: Business session or scoped bearer access token
Request: TwinProductionMessageRequest
Response: ReceizApiResponse

Production: Execute a metered message against the caller's owned Twin. Public proof verification is open. Production Creator and Twin APIs begin with Business. Accepted production output consumes the same usage credits and settlement path as first-party execution.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

GET /api/developers/webhooksv2026-08-22.v124

GET /api/developers/webhooks
Auth: Business session or scoped bearer access token
Request: No request body
Response: ReceizApiResponse

Production: List production webhook endpoints. Public proof verification is open. Production Creator and Twin APIs begin with Business. Webhook endpoint management does not spend AI usage credits.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/developers/webhooksv2026-08-22.v124

POST /api/developers/webhooks
Auth: Business session or scoped bearer access token
Request: No request body
Response: ReceizApiResponse

Production: Create a production webhook endpoint. Public proof verification is open. Production Creator and Twin APIs begin with Business. Webhook endpoint management does not spend AI usage credits.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

DELETE /api/developers/webhooks/{endpointId}v2026-08-22.v124

DELETE /api/developers/webhooks/{endpointId}
Auth: Business session or scoped bearer access token
Request: No request body
Response: ReceizApiResponse

Production: Delete a production webhook endpoint. Public proof verification is open. Production Creator and Twin APIs begin with Business. Webhook endpoint management does not spend AI usage credits.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

PATCH /api/developers/webhooks/{endpointId}v2026-08-22.v124

PATCH /api/developers/webhooks/{endpointId}
Auth: Business session or scoped bearer access token
Request: No request body
Response: ReceizApiResponse

Production: Update a production webhook endpoint. Public proof verification is open. Production Creator and Twin APIs begin with Business. Webhook endpoint management does not spend AI usage credits.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/developers/webhooks/{endpointId}/rotate-secretv2026-08-22.v124

POST /api/developers/webhooks/{endpointId}/rotate-secret
Auth: Business session or scoped bearer access token
Request: No request body
Response: ReceizApiResponse

Production: Rotate a production webhook secret. Public proof verification is open. Production Creator and Twin APIs begin with Business. Webhook endpoint management does not spend AI usage credits.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

POST /api/developers/webhooks/{endpointId}/test-eventv2026-08-22.v124

POST /api/developers/webhooks/{endpointId}/test-event
Auth: Business session or scoped bearer access token
Request: No request body
Response: ReceizApiResponse

Production: Prepare a signed production webhook test event. Public proof verification is open. Production Creator and Twin APIs begin with Business. Webhook endpoint management does not spend AI usage credits.

Source: app/lib/developers/openapiSpec.ts
SHA-256: 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5
Conformance: pnpm test:verification-conformance
Authority: Mechanic only · sealed proof object remains stronger

Permanent anchor · #http-openapi-openapi-document

OpenAPI document

OpenAPI 2026-08-22.v124 is a 3.1 public projection generated from app/lib/developers/openapiSpec.ts at SHA-256 7c67b9cbb2fe2804ea63376d2cefc3df2ea64474bf00699392da703229bdaac5. It declares 105 operations and 179 component schemas.

Permanent anchor · #http-openapi-public-routes

Public routes

The inventory below publishes every method and path across Discovery (2), Verification (6), Identity (11), Connect (20), Wallet (2), Public Proof (7), Payments (2), Signal And Sports (21), World (4), Universal Runtime (22), Production (8). GET /api/openapi and GET /openapi.json expose the same generated contract.

Permanent anchor · #http-openapi-authentication-classes

Authentication classes

No Auth is open. Bearer Access Token is scoped bearer authorization. OAuth Client Auth is OAuth client authentication. Authenticated is the Receiz session-cookie boundary. Public verification remains open; production Creator and Twin operations begin with Business.

Permanent anchor · #http-openapi-requests

Requests

Each operation below names its request schema or declares no request body. Component schemas: ActionLedgerFeed[ok,events]; CheckoutRequest[amountUsd,currency]; CheckoutSessionResponse[ok]; CheckoutSessionStatusResponse[ok]; ConformanceBadgeResponse[ok]; ConformanceHistoryResponse[ok,schema,generatedAt,count,snapshots]; ConformanceRollupsResponse[ok,schema,generatedAt,days,count,rollups]; ConnectTransferRequest[recipientUserId,unit]; ConnectTransferResponse[ok]; ConnectWalletResponse[ok]; CreateTwinMarketIntentInput[marketId,side]; CreatorProductionRunRequest[requestId,quoteExpiresAt,prompt]; DocumentSealRequest[file]; DocumentSealResponseMetadata[no required fields]; DocumentVerifyRequest[file]; DocumentVerifyResponse[ok,kind,errors,warnings]; GenericReceizRequest[no required fields]; GrantedScopesResponse[schema,grantedScopes,applicationId]; NoteClaimResponse[ok]; OidcAgentTokenRequest[clientId]; OidcAgentTokenResponse[ok]; OidcDiscoveryMetadata[issuer,authorization_endpoint,token_endpoint,jwks_uri,response_types_supported,subject_types_supported,id_token_signing_alg_values_supported]; OidcIntrospectionResponse[active]; OidcJwksResponse[keys]; OidcResponse[no required fields]; OidcRevocationResponse[no required fields]; OidcTokenForm[no required fields]; OidcTokenResponse[access_token,token_type,expires_in]; OidcUserinfoResponse[sub]; PhiValueExecutionOutcome[no required fields]; PhiValueExecutionRequest[intent,authorityDigest]; ProofAuthorityExchangeRequest[artifact,challenge,applicationId,scopes]; ProofAuthorityExchangeResponse[schema,applicationId,artifactDigest,grantedScopes,authorityDigest,accessToken,expiresIn,refreshable,authority]; PublicProofCollectionResponse[ok,records]; PublicProofLookupResponse[ok]; PublicProofObserveResponse[ok,record]; PublicProofRecord[no required fields]; PublicProofRegistryFeed[schema,records]; PublicProofRegistryFeedResponse[ok]; ReceizApiResponse[no required fields]; ReceizAppStateFeed[schema,records]; ReceizAppStateRecord[id,sourceUrl,schema,data]; ReceizAssetManifest[schema,assetId,assetType,proof,links]; ReceizErrorResponse[ok,error]; ReceizIdContinueRequest[keyId,alg,publicKeyRawB64u,localUid,username,displayName,createdAt,challengeB64Url,signatureB64Url]; ReceizIdContinueResponse[ok,created,bound,next,session]; ReceizProofBundle[kind,payloadVersion,createdAtMs,ts,code,slug,verifyPath,verifyUrl,kaiPulseEternal]; ReceizSportsCardManifest[schema,sport,collectibleId,claimHash,card,ownership,valueBasis,links]; ReceizWebhookEvent[schema,id,type,createdAt,data]; SaveTwinMarketMandateInput[no required fields]; SignalCircuitConformanceResponse[ok]; SignalCircuitResponse[no required fields]; SignalCircuitSimulationResponse[ok]; SportsConformanceResponse[ok]; SportsDeveloperResponse[no required fields]; SubjectNamespaceResolutionRequest[atHead,names]; SubjectNamespaceResolutionResponse[ok,subjectId,atHead,registryDigest,reducerDigest,namespaces,authenticationDigest]; TwinApprovalResponse[ok,twinApproval]; TwinMarketIntentResponse[ok,intent]; TwinMarketIntentsResponse[ok]; TwinMarketMandateResponse[ok,mandate]; TwinMindArtifactPng[no required fields]; TwinMindImportRequest[mind]; TwinMindImportSummaryResponse[ok,summary]; TwinProductionMessageRequest[requestId,quoteExpiresAt,message]; TwinPromotionApprovalInput[performance]; V124ApplicationId[no required fields]; V124ArtifactAppendPlan[transitionDigest,actor,resource,operation,commitDomain,effectsDigest,idempotencyKeyDigest,registryDigest,schema,transition,actorConstraint,planDigest,authority]; V124ArtifactAppendPlanDigest[algorithm,binds,value]; V124ArtifactAppendReceipt[commitDomain,actor,resource,operation,planDigest,capabilityDigest,transitionDigest,artifactDigest,priorHead,acceptedHead,commandDigest,idempotencyIdentityDigest,authority]; V124ArtifactDigest[algorithm,binds,value]; V124ArtifactPreservedNamespace[namespace,bodyDigest]; V124ArtifactProofSuiteRequirements[signatureVersion,carrier]; V124ArtifactTransitionBasis[artifactId,priorArtifactDigest,basePayloadDigest,expectedHead,proposedHistoryHead,namespace,namespaceLawVersion,namespaceReducerVersion,priorNamespaceBodyDigest,eventDigest,proposedNamespaceBodyDigest,preservedNamespaces,registryDigest,actor,proofSuiteRequirements]; V124ArtifactTransitionCommandDigest[algorithm,binds,value]; V124ArtifactTransitionCommitCommand[planDigest,capabilityDigest,transitionDigest,candidateArtifactDigest,stagedCandidateReference,commitDomain,commandDigest]; V124ArtifactTransitionCommitUnit[commitDomain,plan,capability,command,expectedHead]; V124ArtifactTransitionDigest[algorithm,binds,value]; V124AuthenticatedRuntimeReceipt[schema,method,path,requestDigest,wireDigest,applicationId,audience,issuedAtKaiUPulse,expiresAtKaiUPulse,revocationHead,revokedAtKaiUPulse,authority,receiptDigest]; V124AuthorityNamespaceHead[name,head,digest]; V124AuthoritySession[schema,status,authoritySessionHandle,applicationId,audience,actorSubjectId,subjectSourceArtifactSha256,identityArtifactSha256,identityKeyId,grantedScopes,grantedRails,namespaces,revocationHead,issuedAtKaiUPulse,expiresAtKaiUPulse,sessionBindingDigest,runtimeReceiptDigest,authority]; V124AuthoritySessionClosed[schema,status,authoritySessionHandle,applicationId,audience,revocationHead,closedAtKaiUPulse,sessionBindingDigest,runtimeReceiptDigest,authority]; V124AuthoritySessionClosedWire[schema,status,authoritySessionHandle,applicationId,audience,priorRevocationHead,revocationAppendDigest,revocationHead,closedAtKaiUPulse,sessionBindingDigest,authority]; V124AuthoritySessionWire[schema,status,authoritySessionHandle,applicationId,audience,actorSubjectId,subjectSourceArtifactSha256,identityArtifactSha256,identityKeyId,grantedScopes,grantedRails,namespaces,revocationHead,issuedAtKaiUPulse,expiresAtKaiUPulse,sessionBindingDigest,authority]; V124CapabilityOperationConstraints[planDigest,commitDomain]; V124CapabilityPayload[schema,capabilityId,issuerKeyId,actorId,tenantId,audience,authorityProfile,operations,resourceScopes,maximumEffects,registryDigest,validFromKai,expiresAtKai,nonce,parentDigest,delegationDepth,maximumDelegationDepth,offline,operationConstraints]; V124CloseAuthoritySessionRequest[applicationId,authoritySessionHandle,expectedPriorRevocationHead,expectedPriorSessionBindingDigest]; V124CommitDomainId[scheme,value]; V124CommittedExecutionOutcome[schema,status,executionId,applicationId,domainId,operationKind,exactPlanDigest,semanticIdempotencyKey,attemptId,terminalAtKaiUPulse,committedHeads,outcomeDigest,authority,receiptDigest]; V124Digest[no required fields]; V124DomainCheckpointProjection[schema,status,applicationId,domainId,registryDigest,reducerDigest,throughHead,cursor,namespace,exactCheckpointBytesB64u,checkpointDigest,receiptDigest,authority]; V124DomainCheckpointReceipt[schema,applicationId,domainId,registryDigest,reducerDigest,throughHead,cursor,namespace,checkpointDigest,authority,receiptDigest]; V124DomainCheckpointRuntimeWire[schema,checkpoint,checkpointReceipt,sourceArtifact]; V124DomainNamespaceProjection[name,exactBytesB64u,digest,head]; V124DomainReplayAddition[appendId,sequence,cursor,exactEventBytesB64u,eventDigest,causalParents,priorHead,newHead,namespaceHead,namespaceDigest]; V124DomainReplayProjection[schema,status,applicationId,domainId,registryDigest,reducerDigest,afterHead,afterCursor,cursor,priorHead,head,namespace,additions,receiptDigest,authority]; V124DomainReplayReceipt[schema,applicationId,domainId,registryDigest,reducerDigest,afterHead,priorHead,head,afterCursor,cursor,namespace,additionsDigest,authority,receiptDigest]; V124DomainReplayRuntimeWire[schema,replay,replayReceipt,sourceArtifact]; V124DurableExecutionHandle[schema,executionId,applicationId,domainId,operationKind,exactPlanDigest,semanticIdempotencyKey,attemptId,stagedAtKaiUPulse,handleDigest,authority,receiptDigest]; V124ExactIdentityArtifact[exactBytesB64u,digest]; V124ExecutionCancelRequest[applicationId,handle,authoritySession]; V124ExecutionCancelWire[no required fields]; V124ExecutionExecuteRequest[applicationId,handle,authoritySession,transitionSet]; V124ExecutionFailureReason[no required fields]; V124ExecutionOutcome[no required fields]; V124ExecutionResolutionWire[no required fields]; V124ExecutionStageRequest[applicationId,plan]; V124ExecutionStageWire[no required fields]; V124ExecutionTransitionRecoveryResponse[schema,outcome,recovery]; V124ExecutionZeroWriteFailure[schema,executionId,applicationId,domainId,operationKind,exactPlanDigest,semanticIdempotencyKey,attemptId,reasonCode,writes,failureDigest,authority,receiptDigest]; V124ExpectedPriorAuthoritySession[actorSubjectId,subjectSourceArtifactSha256,identityArtifactSha256,identityKeyId,grantedScopes,grantedRails,namespaces,revocationHead,issuedAtKaiUPulse,expiresAtKaiUPulse,sessionBindingDigest]; V124ExternalOperationEffectsDigest[algorithm,binds,value]; V124HistoryDigest[algorithm,binds,value]; V124IdempotencyIdentityDigest[algorithm,binds,value]; V124IdentityLoginProof[schema,keyId,alg,challengeB64Url,signatureB64Url]; V124NamespaceBodyDigest[algorithm,binds,value]; V124NamespaceEventDigest[algorithm,binds,value]; V124NamespaceId[scheme,value]; V124NamespaceResolutionRequest[applicationId,subjectId,atHead,names,expectedAdmittedProofDigest,expectedOwnershipHead,expectedRegistryDigest,expectedReducerDigest]; V124NamespaceResolutionWire[schema,subjectId,atHead,admittedProofDigest,ownershipHead,registryDigest,reducerDigest,namespaces,authority,resolutionDigest,sourceArtifact]; V124NoncommittedExecutionOutcome[schema,status,executionId,applicationId,domainId,operationKind,exactPlanDigest,semanticIdempotencyKey,attemptId,terminalAtKaiUPulse,reasonCode,writes,outcomeDigest,authority,receiptDigest]; V124OpenAuthoritySessionRequest[applicationId,actorSubjectId,artifact,subjectSourceArtifact,signedChallenge,requestedRails,requiredNamespaces,audience]; V124OperationalCapability[operation,status,actualGrantedScopes,serviceVersion,registryVersion,reducerVersion,publicDependencyHeads,dependencyHealth,reasonCode,retry,evidence]; V124OperationalCapabilityReportWire[schema,applicationId,requestedOperations,qualifiedAtKaiUPulse,results,reportDigest,authority]; V124OperationalQualificationRequest[applicationId,operations]; V124OperationPlan[schema,applicationId,domainId,operationKind,registryDigest,reducerDigest,exactPlanBytesB64u,exactPlanDigest,expectedParticipantHeads,semanticIdempotencyKey,attemptId,writesOnFailure]; V124PayloadDigest[algorithm,binds,value]; V124PortableExecutionPlanning[commitDomain,namespace,event,expectedHead,idempotencyKey]; V124PortableExecutionTransitionMember[schema,profile,participantId,operationPlan,planning,predecessor,candidate,identityArtifact,signedCapability,identityProof,authority]; V124PortableExecutionTransitionSet[schema,applicationId,exactPlanDigest,expectedParticipantHeads,proposedParticipantHeads,members,authority]; V124PortableSealedArtifact[schema,exactBytesB64u,filename,mimeType,artifactSha256,payloadSha256]; V124PrivateDomainAddition[no required fields]; V124PrivateDomainAdditionsFailureWire[schema,status]; V124PrivateDomainAdditionsSuccessWire[schema,status,applicationId,domainId,afterHead,afterCursor,cursor,priorHead,head,viewerSubjectId,viewerSubjectHead,grantHead,accessKeyHead,additions,sourceArtifact,viewerSubjectSourceArtifact,accessGrantSourceArtifact,authority]; V124PrivateDomainAdditionsWire[no required fields]; V124PrivateDomainEncryptedAddition[additionKind,appendId,sequence,cursor,exactPublicEventBytesB64u,eventDigest,priorHead,newHead,domainHead,viewerSubjectId,viewerSubjectHead,grantHead,accessKeyHead,privateEnvelope,recipientWrapDigest]; V124PrivateDomainPublicAddition[additionKind,appendId,sequence,cursor,exactPublicEventBytesB64u,eventDigest,priorHead,newHead,domainHead]; V124PrivateRecipientEphemeralPublicKey[key_ops,ext,kty,crv,x,y]; V124PrivateRecipientWrapProjection[recipientSubjectId,recipientAccessKeyHead,ephemeralPublicKeyJwk,nonceB64u,wrappedContentKeyB64u,wrapDigest]; V124PrivateWorldEnvelopeProjection[schema,worldId,visibilityMode,ciphertextB64u,nonceB64u,aadDigest,payloadDigest,envelopeDigest,recipientWrap,authority]; V124ProofAuthorityChallenge[schema,audience,nonce,issuedAtKai,expiresAtKai,consent,proof]; V124PublicRecipientResolutionFailureWire[schema,status]; V124PublicRecipientResolutionRequest[applicationId,authoritySessionHandle,expectedRequesterSubjectId,normalizedAlias,purpose,operationNonce]; V124PublicRecipientResolutionSuccessWire[schema,status,applicationId,normalizedAlias,purpose,operationNonce,display,encryptedLocatorB64u,expiresAtKaiUPulse,locatorDigest,authority]; V124PublicRecipientResolutionWire[no required fields]; V124RefreshAuthoritySessionRequest[applicationId,authoritySessionHandle,artifact,signedChallenge,requestedRails,requiredNamespaces,audience,expectedPriorSession]; V124RegistryBoundDigest[algorithm,binds,value]; V124SealedSourcePublicationRequest[applicationId,authoritySessionHandle,sourceArtifact]; V124SealedSourcePublicationResult[schema,status,sourceKind,artifactSha256,sourceBindingDigest,authority]; V124SignedActiveAuthoritySessionEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedCapability[schema,payload,alg,signatureB64u]; V124SignedClosedAuthoritySessionEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedDomainCheckpointEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedDomainReplayEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedExecutionCancelEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedExecutionResolutionEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedExecutionStageEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedNamespaceResolutionEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedOperationalCapabilityEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedPrivateDomainAdditionsEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedPublicRecipientResolutionEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124SignedSealedSourcePublicationEnvelope[schema,wire,receipt,transportBinding,transportSignature]; V124StagedCandidateReference[commitDomain,artifactDigest,transitionDigest,storageKeyDigest,authority]; V124TransportBinding[schema,domain,issuerRootKid,method,path,requestDigest,wireDigest,receiptDigest,applicationId,audience,issuedAtKaiPulse,issuedAtKaiUPulse,expiresAtKaiUPulse,revocationHead,authority]; V124TransportSignature[schema,kid,alg,sig]; V124UnknownExecutionOutcome[schema,status,executionId,applicationId,domainId,operationKind,exactPlanDigest,semanticIdempotencyKey,attemptId,stagedAtKaiUPulse,plan,authority,receiptDigest]; V124VerifiedActorEvidenceDigest[algorithm,binds,value]; V124VerifiedActorReference[actorId,evidenceDigest,admissionProfile,registryDigest]; V124VerifiedCapability[schema,payload,digest,verifier,authority]; V124VerifiedCapabilityDigest[algorithm,binds,value]; V124VerifiedCheckpointRequest[applicationId,domainId,throughHead]; V124VerifiedPrivateAdditionsRequest[applicationId,domainId,afterHead,authoritySessionHandle,accessGrantHandle,expectedViewerSubjectId,expectedViewerSubjectHead,expectedGrantHead]; V124VerifiedReplayRequest[applicationId,domainId,afterHead,expectedRegistryDigest,expectedReducerDigest]; WalletLedgerEvent[id,kind,createdAt]; WalletLedgerFeed[ok,events,rollup]; WalletLedgerRollup[no required fields]; WalletNoteDownloadResponse[ok]; WalletNoteResponse[ok]; WorldPublicResponse[no required fields].

Permanent anchor · #http-openapi-responses

Responses

Each operation below names its exact response schema. HTTP status and response bodies report transport or operation state; independently verified sealed bytes remain stronger than the response.

Permanent anchor · #http-openapi-end-to-end-example

End-to-end example

Begin with exact held sealed bytes and recompute verification locally. Then use a declared route only for optional transport, publication, operation, or comparison, and reject any response that conflicts with the held artifact. No dedicated Offline Note local Reserve subtraction, qualification, consumption, activation, or Send operation is declared by this OpenAPI document. Genesis begins from verified receiz.account.state.v3 and locally verified account and Note successors; HTTP verification or later publication remains subordinate to qualified local custody and complete local Settlement.

Copyable path

Authenticated SDK issuance → Verify → inspect receipt

import { createReceizClient } from "@receiz/sdk";

// Begin with the complete proof object already held by the person or runtime.
const encoded = process.env.RECEIZ_ARTIFACT_BASE64;
if (!encoded) throw new Error("RECEIZ_ARTIFACT_BASE64 is required");
const artifactBytes = Uint8Array.from(Buffer.from(encoded, "base64"));

// Local verification is account-free and precedes every transport projection.
const receiz = createReceizClient();
const verification = await receiz.verification.verifyArtifact(artifactBytes);
if (verification.status !== "verified-artifact") {
  throw new Error(`Artifact verification status: ${verification.status}`);
}
console.log(verification.status);

Deterministic check

Conformance

pnpm test:verification-conformance

Run from the Receiz repository against the exact coordinated package identity. A command result is evidence beneath sealed artifact truth.