---
title: "REST API"
description: "Every endpoint Veefore serves, across 21 groups."
label: "Overview"
generated: "the API catalogue in apps/control-plane/src/routes/developer.ts"
---


Veefore serves 120 endpoints across 21 groups. Everything under `/v1` is the control plane. Everything under `/gateway/v1` is the enforcement plane, served by a different process, and is the only surface an agent ever calls.

Read [Conventions](/reference/conventions) first — pagination, idempotency, scope headers and the error envelope are the same everywhere, and are not repeated per endpoint.

## Groups

:::cards

:::card Authentication | /reference/api/authentication
Sessions, multi-factor authentication and step-up re-authentication for humans. 17 endpoints.
:::

:::card Tools | /reference/api/tools
The registry of what an agent is allowed to call. 6 endpoints.
:::

:::card Tenancy | /reference/api/tenancy
Organizations, workspaces, environments and the enforcement mode of each. 13 endpoints.
:::

:::card Agents | /reference/api/agents
Registration, lifecycle control and key rotation for agent identities. 13 endpoints.
:::

:::card Passport | /reference/api/passport
Issue, read, export and verify the signed Agent Passport. 5 endpoints.
:::

:::card Policy | /reference/api/policy
Author, version, simulate, test, activate and roll back policy. 10 endpoints.
:::

:::card Delegation | /reference/api/delegation
Grant, narrow, inspect and revoke delegated authority. 6 endpoints.
:::

:::card Actions | /reference/api/actions
Search protected actions and run the enforcement pipeline directly. 3 endpoints.
:::

:::card Approvals | /reference/api/approvals
The human approval queue and its decisions. 4 endpoints.
:::

:::card Risk | /reference/api/risk
Risk scores, the signals behind them, and the weights you control. 3 endpoints.
:::

:::card Trust | /reference/api/trust
Trust evidence an agent has accumulated, and how to record more. 2 endpoints.
:::

:::card Credentials | /reference/api/credentials
Credential references, rotation and revocation. Secrets are never returned. 4 endpoints.
:::

:::card Audit | /reference/api/audit
Search, export and verify the tamper-evident audit trail. 4 endpoints.
:::

:::card Security | /reference/api/security
Security Center, incidents and emergency controls. 5 endpoints.
:::

:::card MCP | /reference/api/mcp
Model Context Protocol servers and per-tool authorization. 5 endpoints.
:::

:::card A2A | /reference/api/a2a
Agent-to-agent connections and passport verification. 4 endpoints.
:::

:::card Registry | /reference/api/registry
The private agent registry for internal discovery. 2 endpoints.
:::

:::card Webhooks | /reference/api/webhooks
Subscriptions, signing secrets and delivery. 3 endpoints.
:::

:::card Billing | /reference/api/billing
Veefore usage metering and subscription state. 2 endpoints.
:::

:::card Admin | /reference/api/admin
Compliance evidence, SSO, SCIM and network restrictions. 4 endpoints.
:::

:::card Gateway | /reference/api/gateway
The enforcement plane. Agents talk here and nowhere else. 5 endpoints.
:::

:::

## Permission coverage

The table below is derived from the same catalogue the console uses to grey out endpoints a session cannot call. "Open" means the endpoint requires no console permission, which is true of authentication and of every gateway route (agents authenticate with a key, not a role).

| Group | Endpoints | Step-up | Open |
| --- | --- | --- | --- |
| [Authentication](/reference/api/authentication) | 17 | 0 | 17 |
| [Tools](/reference/api/tools) | 6 | 0 | 1 |
| [Tenancy](/reference/api/tenancy) | 13 | 1 | 0 |
| [Agents](/reference/api/agents) | 13 | 2 | 0 |
| [Passport](/reference/api/passport) | 5 | 0 | 0 |
| [Policy](/reference/api/policy) | 10 | 2 | 0 |
| [Delegation](/reference/api/delegation) | 6 | 0 | 0 |
| [Actions](/reference/api/actions) | 3 | 0 | 0 |
| [Approvals](/reference/api/approvals) | 4 | 0 | 0 |
| [Risk](/reference/api/risk) | 3 | 0 | 0 |
| [Trust](/reference/api/trust) | 2 | 0 | 0 |
| [Credentials](/reference/api/credentials) | 4 | 2 | 0 |
| [Audit](/reference/api/audit) | 4 | 0 | 0 |
| [Security](/reference/api/security) | 5 | 1 | 0 |
| [MCP](/reference/api/mcp) | 5 | 0 | 0 |
| [A2A](/reference/api/a2a) | 4 | 0 | 0 |
| [Registry](/reference/api/registry) | 2 | 0 | 0 |
| [Webhooks](/reference/api/webhooks) | 3 | 0 | 0 |
| [Billing](/reference/api/billing) | 2 | 0 | 0 |
| [Admin](/reference/api/admin) | 4 | 0 | 0 |
| [Gateway](/reference/api/gateway) | 5 | 0 | 5 |