v2

latestOpenAPI 3.0.4Apache 2.0raw.githubusercontent.com2026-07-1754198241.7 KB
RouteExposures

Get a route exposure descriptor

Reads one route exposure descriptor by id.

get/route/exposures/{exposureDescriptorId}

Path parameters

exposureDescriptorIdstring required

Stable identifier of an externally callable route exposure descriptor.

Example:proof-vault-read-exposure

Stable identifier of a route exposure descriptor.

Response

Route exposure descriptor.

exposureDescriptorIdstring required

Stable identifier of an externally callable route exposure descriptor.

exposedCapabilityIdstring required
owningTenantIdstring required

Tenant identifier used by tenant-scoped connector registration, routing, and execution.

organizationUnitIdstring
brandIdstring
logicalConnectionBindingIdstring required

Stable identifier of a tenant, OU, brand, legal-entity, or channel usage binding for a physical connector instance.

exchangeMode'PLATFORM_INITIATED_PULL' | 'PLATFORM_INITIATED_PUSH' | 'EXTERNALLY_INITIATED_READ' | 'EXTERNALLY_INITIATED_WRITE' | 'SUBSCRIPTION_CALLBACK' | 'BIDIRECTIONAL_SYNC' required

Explicit exchange quadrant. Data direction and initiation side remain separate axes in run responses.

allowedOperation'READ' | 'WRITE' | 'UPDATE' | 'DELETE' | 'UPSERT' | 'QUERY' | 'SEARCH' | 'IMPORT' | 'EXPORT' | 'INVOKE' | 'DISCOVER' | 'VALIDATE' required

Reusable operation taxonomy shared by connectors, inventory, policy, and workflows. The operation kind is logical; connector-local details live in operationName.

acceptedAuthMethodsstring[] required
requestSchemaRefstring
responseSchemaRefstring
cursorStrategystring
idempotencyKeyStrategystring
payloadLimitBytesinteger
rateLimitKeystring
auditCategory'PROTOCOL_ISSUANCE' | 'PROTOCOL_VERIFICATION' | 'FORM' | 'PORTAL' | 'WORKFLOW' | 'DATASPACE' | 'INDUSTRIAL' | 'EXTERNAL_EXCHANGE' | 'VAULT' | 'SYSTEM_CATALOG'

Audit category used by governed connector invocations, runs, and externally callable route exposures.

Example response

{
  "exposureDescriptorId": "proof-vault-read-exposure",
  "exposedCapabilityId": "proof-vault-read",
  "owningTenantId": "acme",
  "organizationUnitId": "nl-ops",
  "brandId": "brand-a",
  "logicalConnectionBindingId": "brand-a-proof-vault",
  "exchangeMode": "EXTERNALLY_INITIATED_READ",
  "allowedOperation": "READ",
  "acceptedAuthMethods": [
    "bearer",
    "mtls"
  ],
  "payloadLimitBytes": 1048576,
  "auditCategory": "EXTERNAL_EXCHANGE"
}