Information
- OpenAPI version:
3.1.0
The endpoints Llooma's own interface talks to in server mode.
This API exists to serve the Llooma web client. It is documented so the behaviour is auditable and so a self-hosted instance can be scripted, not because it is a stable public contract — it changes with the interface.
Everything here requires an authenticated session unless a path says
otherwise, and /api is exempt from the page-level auth guard, so each
endpoint checks the session itself.
Endpoints are marked x-status: todo until their request and response
shapes have been written down. The surface itself (paths and methods) is
checked against the routes in CI by scripts/check-api-docs.mjs.
Session cookie issued by Auth.js on sign-in.
Security scheme type: apiKey
Cookie parameter name: authjs.session-token