API
Scoped APIs are live; unified execution is still planned.
Workspace API keys work for tenant-scoped record reads and writes, Guard scans and Composer runs. Skill execution, Memory retrieval, Workflow runs and Agent triggers are not deployed.
Keys are created, listed and revoked from a signed-in workspace, and the secret is shown once. The available endpoints are listed below; billing, unified credits and a unified Skill, Memory or Agent execution API remain planned.

Available endpoints
Use these deployed routes today.
| GET | /api/v1/workspace | Read workspace counts, policy and recent activity metadata |
| GET · POST | /api/v1/workspace/skills | List or create Skill install records |
| GET · POST | /api/v1/workspace/memory | List or create Memory collection records |
| GET · POST | /api/v1/workspace/drafts/{kind} | List or create Agent, Workflow or App drafts |
| GET | /api/v1/workspace/activity | Read saved workspace activity metadata |
| GET · PATCH | /api/v1/workspace/settings | Read or update workspace policy |
| POST | /api/v1/guard/scan | Scan a public GitHub repository or supplied text |
| POST | /api/v1/run | Run Composer through the tenant's assigned AIHK or AICA gateway |
# Available with a key carrying workspace:read curl https://gen-cms.com/api/v1/workspace \ -H "Authorization: Bearer $GENCMS_API_KEY"
# Available with a key carrying guard:scan
curl https://gen-cms.com/api/v1/guard/scan \
-H "Authorization: Bearer $GENCMS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"mode": "quick",
"content": "name: example-skill\npermissions: []"
}'Execution roadmap
These endpoint shapes are proposed, not deployed.
They document product direction only and must not be used as a current integration contract.
| POST | /v1/skills/{slug}/run | Execute an installed Skill |
| POST | /v1/memory/{collection}/query | Retrieve indexed context and citations |
| POST | /v1/workflows/{id}/run | Execute a Workflow draft |
| POST | /v1/agents/{id}/trigger | Trigger an Agent draft |
No unified chat endpoint, Skill runtime, Memory query, Workflow execution, Agent trigger, run billing, streaming contract or usage-credit header is implemented by these proposed routes.
Key scopes
Give each integration only the access it needs.
workspace:read
Read tenant-scoped workspace records, settings and activity metadata.
workspace:write
Create, update or remove supported workspace records and settings.
guard:scan
Run Guard over a public GitHub repository or supplied text.
composer:run
Run chat through the AIHK or AICA gateway assigned to the active tenant.