Skip to content

Overview

The endpoints Llooma's own interface talks to in server mode.

This API exists to serve the Llooma web client. It is documented so the behaviour is auditable and so a self-hosted instance can be scripted, not because it is a stable public contract — it changes with the interface.

Everything here requires an authenticated session unless a path says otherwise, and /api is exempt from the page-level auth guard, so each endpoint checks the session itself.

Endpoints are marked x-status: todo until their request and response shapes have been written down. The surface itself (paths and methods) is checked against the routes in CI by scripts/check-api-docs.mjs.

Information

  • OpenAPI version: 3.1.0

Session cookie issued by Auth.js on sign-in.

Security scheme type: apiKey

Cookie parameter name: authjs.session-token