Information
- OpenAPI version:
3.1.0
Overview
artbucket 1
Section titled “artbucket 1”Agent-first asset management. The web UI is built on this API and nothing else, beside signing in at /api/auth. Send Authorization: Bearer <key>: a key works in one project with one scope, and scopes are a ladder: read < propose < write < admin. People signed in to the app carry a session cookie instead, and their scope is what their grants add up to: on the organization, the project, or single collections and assets. A scope shown as needed on the project is also enough on the one collection or asset a route acts on. Agents (MCP at POST /api/v1/mcp) usually get propose: what they add waits for a human.
Operations
Section titled “Operations”POST
/api/v1/uploadsPOST
/api/v1/assetsPOST
/api/v1/checkPOST
/api/v1/iconsDELETE
/api/v1/assets/{id}PATCH
/api/v1/assets/{id}DELETE
/api/v1/collections/{id}POST
/api/v1/fieldsDELETE
/api/v1/fields/{key}PATCH
/api/v1/fields/{key}POST
/api/v1/searchesDELETE
/api/v1/searches/{id}PATCH
/api/v1/brand/rulesDELETE
/api/v1/brand/rules/{id}POST
/api/v1/brandsDELETE
/api/v1/brands/{slug}GET
/api/v1/mePATCH
/api/v1/me/digestPOST
/api/v1/projectsDELETE
/api/v1/projects/{id}POST
/api/v1/grantsDELETE
/api/v1/grants/{id}POST
/api/v1/groupsDELETE
/api/v1/groups/{id}PATCH
/api/v1/groups/{id}DELETE
/api/v1/automations/{id}DELETE
/api/v1/invitations/{id}POST
/api/v1/sharesDELETE
/api/v1/shares/{id}POST
/api/v1/sitesDELETE
/api/v1/sites/{id}PATCH
/api/v1/sites/{id}POST
/api/v1/domainsDELETE
/api/v1/domains/{host}POST
/api/v1/joinDELETE
/api/v1/joinDELETE
/api/v1/hub/{org}/followGET
/api/v1/ssoPUT
/api/v1/ssoDELETE
/api/v1/ssoPATCH
/api/v1/ssoDELETE
/api/v1/settings/{key}GET
/api/v1/keysPOST
/api/v1/keysDELETE
/api/v1/job-tokensDELETE
/api/v1/keys/{id}PATCH
/api/v1/keys/{id}GET
/api/v1/mcpPOST
/api/v1/mcpGET
/api/healthGET
/a/{id}GET
/c/{id}Authentication
Section titled “Authentication”bearer
Section titled “bearer”An API key: ab_…
Security scheme type: http
session
Section titled “session”Signed in, at /api/auth
Security scheme type: apiKey
Cookie parameter name: better-auth.session_token