| GET | /fabric/agent-keys | List this account's agent keys (secrets are never shown again) | Trust Fabric |
| POST | /fabric/agent-keys | Create an agent key (a separate principal for one agent) | Trust Fabric |
| POST | /fabric/agent-keys/{agent_key_id}/fast-path | Let one agent's already-allowed calls to these tools skip the per-call consensus round | Trust Fabric |
| DELETE | /fabric/agent-keys/{agent_key_id}/fast-path | Remove an agent's fast-path grant immediately | Trust Fabric |
| POST | /fabric/agent-keys/{agent_key_id}/revoke | Revoke one agent key immediately | Trust Fabric |
| GET | /fabric/agi/evidence-chain | Agi Evidence Chain | CAIN AGI Control Boundary |
| GET | /fabric/agi/evidence-chain.cef | Agi Evidence Chain Cef | CAIN AGI Control Boundary |
| POST | /fabric/agi/propose | Agi Submit Proposal | CAIN AGI Control Boundary |
| GET | /fabric/agi/sandbox-tools | Agi Sandbox Tools | CAIN AGI Control Boundary |
| GET | /fabric/anomalies | Deviations from this principal's own baseline | Trust Fabric |
| GET | /fabric/approvals | Actions held for human review | Trust Fabric |
| GET | /fabric/approvals/{approval_id} | One held action | Trust Fabric |
| POST | /fabric/approvals/{approval_id}/approve | Let one held action proceed | Trust Fabric |
| POST | /fabric/approvals/{approval_id}/deny | Refuse one held action | Trust Fabric |
| GET | /fabric/baseline | What normal looks like for this tenant or agent | Trust Fabric |
| POST | /fabric/broker/call | CAIN decides on the call, then makes it with the stored credential | Credential broker |
| GET | /fabric/broker/credentials | Brokered credentials (the secrets are never returned) | Credential broker |
| POST | /fabric/broker/credentials | Store a credential agents can use without seeing it | Credential broker |
| DELETE | /fabric/broker/credentials/{name} | Revoke a brokered credential | Credential broker |
| GET | /fabric/budgets | List Budgets | CAIN Budget |
| POST | /fabric/budgets | Create Budget | CAIN Budget |
| POST | /fabric/budgets/evaluate | Evaluate Budget | CAIN Budget |
| GET | /fabric/budgets/health | Budget Health | CAIN Budget |
| GET | /fabric/budgets/{budget_id} | Get Budget | CAIN Budget |
| PATCH | /fabric/budgets/{budget_id} | Update Budget | CAIN Budget |
| POST | /fabric/budgets/{budget_id}/commit/{reservation_id} | Commit Reservation | CAIN Budget |
| POST | /fabric/budgets/{budget_id}/freeze | Freeze Budget | CAIN Budget |
| POST | /fabric/budgets/{budget_id}/release/{reservation_id} | Release Reservation | CAIN Budget |
| POST | /fabric/budgets/{budget_id}/reserve | Reserve Budget | CAIN Budget |
| GET | /fabric/budgets/{budget_id}/transactions | List Transactions | CAIN Budget |
| POST | /fabric/budgets/{budget_id}/unfreeze | Unfreeze Budget | CAIN Budget |
| GET | /fabric/budgets/{budget_id}/usage | Get Budget Usage | CAIN Budget |
| GET | /fabric/catalog | Catalog grouped by Trust Fabric domain (what the homepage renders) | Trust Fabric |
| GET | /fabric/compliance/audit-packages | List Audit Packages | CAIN Compliance |
| POST | /fabric/compliance/audit-packages/generate | Generate Audit Package | CAIN Compliance |
| GET | /fabric/compliance/audit-packages/{package_id} | Get Audit Package | CAIN Compliance |
| GET | /fabric/compliance/audit-packages/{package_id}/export | Export Audit Package | CAIN Compliance |
| GET | /fabric/compliance/controls | List Controls | CAIN Compliance |
| POST | /fabric/compliance/controls | Define Control | CAIN Compliance |
| POST | /fabric/compliance/controls/evaluate | Evaluate Control | CAIN Compliance |
| POST | /fabric/compliance/controls/preset | Load Preset Controls | CAIN Compliance |
| GET | /fabric/compliance/controls/status | Get Controls Status | CAIN Compliance |
| GET | /fabric/compliance/controls/{control_id} | Get Control | CAIN Compliance |
| GET | /fabric/compliance/controls/{control_id}/evaluations | List Control Evaluations | CAIN Compliance |
| GET | /fabric/compliance/drift | List Drift | CAIN Compliance |
| POST | /fabric/compliance/drift/detect | Detect Drift | CAIN Compliance |
| POST | /fabric/compliance/drift/snapshot | Capture Snapshot | CAIN Compliance |
| GET | /fabric/compliance/evaluations | List Evaluations | CAIN Compliance |
| GET | /fabric/compliance/evidence | List Evidence | CAIN Compliance |
| POST | /fabric/compliance/evidence/record | Record Evidence | CAIN Compliance |
| GET | /fabric/compliance/evidence/{evidence_id} | Get Evidence | CAIN Compliance |
| GET | /fabric/compliance/findings | List Findings | CAIN Compliance |
| POST | /fabric/compliance/findings | Create Finding | CAIN Compliance |
| GET | /fabric/compliance/findings/summary | Get Findings Summary | CAIN Compliance |
| GET | /fabric/compliance/findings/{finding_id} | Get Finding | CAIN Compliance |
| PATCH | /fabric/compliance/findings/{finding_id} | Update Finding | CAIN Compliance |
| GET | /fabric/compliance/frameworks | List Frameworks | CAIN Compliance |
| POST | /fabric/compliance/frameworks | Create Framework | CAIN Compliance |
| POST | /fabric/compliance/frameworks/preset/{preset} | Load Preset Framework | CAIN Compliance |
| GET | /fabric/compliance/frameworks/{framework_id} | Get Framework | CAIN Compliance |
| GET | /fabric/compliance/health | Get Compliance Health | CAIN Compliance |
| GET | /fabric/compliance/isolation/verify | Verify Tenant Isolation | CAIN Compliance |
| POST | /fabric/compliance/monitor | Configure Monitor | CAIN Compliance |
| GET | /fabric/compliance/posture | Get Compliance Posture | CAIN Compliance |
| GET | /fabric/compliance/remediations | List Remediations | CAIN Compliance |
| POST | /fabric/compliance/remediations | Create Remediation | CAIN Compliance |
| PATCH | /fabric/compliance/remediations/{remediation_id} | Update Remediation | CAIN Compliance |
| GET | /fabric/compliance/summary | Get Compliance Summary | CAIN Compliance |
| POST | /fabric/context/context/audit | Audit Context | CAIN Context |
| GET | /fabric/context/context/audit/{audit_id} | Get Context Audit | CAIN Context |
| GET | /fabric/context/health | Context Health | CAIN Context |
| POST | /fabric/context/memory/audit | Audit Memory Batch | CAIN Context |
| POST | /fabric/context/memory/ingest | Ingest Memory | CAIN Context |
| GET | /fabric/context/memory/{agent_id} | List Memory Items | CAIN Context |
| GET | /fabric/context/memory/{agent_id}/{item_id}/trust | Get Memory Trust | CAIN Context |
| GET | /fabric/context/stats | Get Stats | CAIN Context |
| GET | /fabric/decision-signing-key | Public key that signs every recorded decision | Trust Fabric |
| GET | /fabric/decisions | List this tenant's recent Fabric decisions | Trust Fabric |
| POST | /fabric/decisions | Ask the control plane to decide on a proposed action | Trust Fabric |
| GET | /fabric/decisions/stream | Live feed of this tenant's decisions (Server-Sent Events) | Trust Fabric |
| GET | /fabric/decisions/{decision_id} | Retrieve one recorded decision (Evidence) | Trust Fabric |
| GET | /fabric/decisions/{decision_id}/explain | Why this decision came out the way it did, and which run it belongs to | Trust Fabric |
| GET | /fabric/decisions/{decision_id}/integrity | Check whether a recorded decision has been altered since it was written | Trust Fabric |
| GET | /fabric/decisions/{decision_id}/signature | Tamper-evidence for one decision record | Trust Fabric |
| GET | /fabric/decisions/{decision_id}/signed-record | Export one decision row exactly as stored and signed; verify offline with verify_decision_record.py --key https://mcpgate.online/fabric/decision-signing-key | Trust Fabric |
| GET | /fabric/drift/agents/{agent_id} | Get Agent Drift Status | CAIN Drift |
| GET | /fabric/drift/baselines | List Baselines | CAIN Drift |
| POST | /fabric/drift/baselines | Create Baseline | CAIN Drift |
| GET | /fabric/drift/baselines/{baseline_id} | Get Baseline | CAIN Drift |
| POST | /fabric/drift/compare | Compare | CAIN Drift |
| GET | /fabric/drift/findings | List Findings | CAIN Drift |
| GET | /fabric/drift/findings/{drift_id} | Get Finding | CAIN Drift |
| POST | /fabric/drift/findings/{drift_id}/accept | Accept Finding | CAIN Drift |
| POST | /fabric/drift/findings/{drift_id}/acknowledge | Acknowledge Finding | CAIN Drift |
| POST | /fabric/drift/findings/{drift_id}/false_positive | Mark False Positive | CAIN Drift |
| GET | /fabric/drift/findings/{drift_id}/history | Get Finding History | CAIN Drift |
| POST | /fabric/drift/findings/{drift_id}/investigate | Investigate Finding | CAIN Drift |
| POST | /fabric/drift/findings/{drift_id}/resolve | Resolve Finding | CAIN Drift |
| GET | /fabric/drift/health | Health | CAIN Drift |
| GET | /fabric/drift/impact/{drift_id} | Get Drift Impact | CAIN Drift |
| POST | /fabric/drift/observe | Observe | CAIN Drift |
| GET | /fabric/drift/stats | Stats | CAIN Drift |
| GET | /fabric/drift/status | Status | CAIN Drift |
| GET | /fabric/egress/rules | This tenant's action-tool allowlist (destinations) | Trust Fabric |
| POST | /fabric/egress/rules | Add a destination allow rule (enables egress enforcement) | Trust Fabric |
| DELETE | /fabric/egress/rules | Remove a destination allow rule | Trust Fabric |
| POST | /fabric/eval/contamination/scan | Scan Contamination | CAIN Eval |
| GET | /fabric/eval/contamination/{scan_id} | Get Scan | CAIN Eval |
| GET | /fabric/eval/health | Eval Health | CAIN Eval |
| POST | /fabric/eval/report | Create Report | CAIN Eval |
| GET | /fabric/eval/stats | Get Stats | CAIN Eval |
| POST | /fabric/eval/trajectory/grade | Grade Trajectory | CAIN Eval |
| GET | /fabric/eval/trajectory/{grading_id} | Get Grading | CAIN Eval |
| GET | /fabric/events | Fabric Events Endpoint | Other |
| GET | /fabric/evidence-access | Who has read this tenant's evidence | Trust Fabric |
| GET | /fabric/governance/approvals | List Approvals | CAIN Governance |
| POST | /fabric/governance/approvals | Create Approval | CAIN Governance |
| GET | /fabric/governance/approvals/{approval_id} | Get Approval | CAIN Governance |
| POST | /fabric/governance/approvals/{approval_id}/decide | Decide Approval | CAIN Governance |
| GET | /fabric/governance/audit | Get Audit Log | CAIN Governance |
| GET | /fabric/governance/authorities | List Authorities | CAIN Governance |
| POST | /fabric/governance/authorities | Create Authority | CAIN Governance |
| GET | /fabric/governance/authorities/{authority_id} | Get Authority | CAIN Governance |
| DELETE | /fabric/governance/authorities/{authority_id} | Revoke Authority | CAIN Governance |
| GET | /fabric/governance/decisions | List Decisions | CAIN Governance |
| GET | /fabric/governance/delegations | List Delegations | CAIN Governance |
| POST | /fabric/governance/evaluate | Evaluate Governance | CAIN Governance |
| GET | /fabric/governance/health | Governance Health | CAIN Governance |
| GET | /fabric/governance/policies | List Policies | CAIN Governance |
| POST | /fabric/governance/policies | Create Policy | CAIN Governance |
| GET | /fabric/governance/policies/{policy_id} | Get Policy | CAIN Governance |
| PATCH | /fabric/governance/policies/{policy_id} | Update Policy | CAIN Governance |
| POST | /fabric/governance/policies/{policy_id}/activate | Activate Policy | CAIN Governance |
| POST | /fabric/governance/policies/{policy_id}/deactivate | Deactivate Policy | CAIN Governance |
| GET | /fabric/guard/a2a/drift/{agent_id} | Check Drift | CAIN Guard |
| POST | /fabric/guard/a2a/nonce/check | Check Nonce | CAIN Guard |
| POST | /fabric/guard/a2a/observe | Observe Capability | CAIN Guard |
| POST | /fabric/guard/a2a/register | Register A2A Card | CAIN Guard |
| POST | /fabric/guard/a2a/revoke/{agent_id} | Revoke Card | CAIN Guard |
| POST | /fabric/guard/a2a/verify | Verify A2A Card | CAIN Guard |
| POST | /fabric/guard/action/verify | Verify Action Plan | CAIN Guard |
| POST | /fabric/guard/hallucination/check | Check Hallucination | CAIN Guard |
| GET | /fabric/guard/health | Guard Health | CAIN Guard |
| GET | /fabric/guard/stats | Get Stats | CAIN Guard |
| POST | /fabric/identity/agent-tokens | Mint a short-lived agent delegation token | Trust Fabric |
| POST | /fabric/identity/agent-tokens/verify | Verify an agent delegation token | Trust Fabric |
| POST | /fabric/identity/capability/check | Check Capability | CAIN Identity |
| POST | /fabric/identity/create | Create Identity | CAIN Identity |
| POST | /fabric/identity/delegation/{delegation_id}/revoke | Revoke Delegation | CAIN Identity |
| GET | /fabric/identity/delegation/{delegation_id}/verify | Verify Delegation Endpoint | CAIN Identity |
| GET | /fabric/identity/health | Identity Health | CAIN Identity |
| POST | /fabric/identity/impersonation/check | Check Impersonation Endpoint | CAIN Identity |
| GET | /fabric/identity/list | List Identities | CAIN Identity |
| GET | /fabric/identity/principals | List this tenant's principals | Trust Fabric |
| POST | /fabric/identity/principals | Register a principal | Trust Fabric |
| GET | /fabric/identity/principals/{principal_id} | Fetch one principal | Trust Fabric |
| POST | /fabric/identity/principals/{principal_id}/revoke | Revoke a principal | Trust Fabric |
| POST | /fabric/identity/principals/{principal_id}/verify | Verify an Ed25519 signature against a registered principal | Trust Fabric |
| POST | /fabric/identity/sessions | Exchange an API key for a short-lived browser session | Trust Fabric |
| GET | /fabric/identity/sessions/current | Inspect the session token in use | Trust Fabric |
| GET | /fabric/identity/tenant/audit | Get Tenant Audit | CAIN Identity |
| GET | /fabric/identity/whoami | Resolve the calling key to its Fabric principal | Trust Fabric |
| GET | /fabric/identity/{identity_id} | Get Identity | CAIN Identity |
| GET | /fabric/identity/{identity_id}/audit | Get Identity Audit | CAIN Identity |
| POST | /fabric/identity/{identity_id}/delegate | Create Delegation | CAIN Identity |
| GET | /fabric/identity/{identity_id}/delegations | List Delegations | CAIN Identity |
| GET | /fabric/identity/{identity_id}/key-history | Get Key History | CAIN Identity |
| POST | /fabric/identity/{identity_id}/reactivate | Reactivate Identity | CAIN Identity |
| POST | /fabric/identity/{identity_id}/revoke | Revoke Identity | CAIN Identity |
| POST | /fabric/identity/{identity_id}/rotate | Rotate Credentials | CAIN Identity |
| POST | /fabric/identity/{identity_id}/suspend | Suspend Identity | CAIN Identity |
| POST | /fabric/identity/{identity_id}/verify | Verify Credential | CAIN Identity |
| POST | /fabric/impact/analyze | Analyze Impact | CAIN Impact |
| POST | /fabric/impact/analyze/drift/{drift_id} | Analyze From Drift | CAIN Impact |
| POST | /fabric/impact/compare | Compare Impacts | CAIN Impact |
| GET | /fabric/impact/dependencies/{entity_id} | Get Entity Dependencies | CAIN Impact |
| GET | /fabric/impact/entities/{entity_id} | Get Entity Impact | CAIN Impact |
| GET | /fabric/impact/graph | Get Causal Graph | CAIN Impact |
| GET | /fabric/impact/health | Health | CAIN Impact |
| GET | /fabric/impact/incidents | List Incidents | CAIN Impact |
| GET | /fabric/impact/incidents/{incident_id} | Get Incident | CAIN Impact |
| GET | /fabric/impact/incidents/{incident_id}/authority | Get Incident Authority | CAIN Impact |
| GET | /fabric/impact/incidents/{incident_id}/blast-radius | Get Incident Blast Radius | CAIN Impact |
| GET | /fabric/impact/incidents/{incident_id}/evidence | Get Incident Evidence | CAIN Impact |
| GET | /fabric/impact/incidents/{incident_id}/graph | Get Incident Graph | CAIN Impact |
| GET | /fabric/impact/incidents/{incident_id}/trajectories | Get Incident Trajectories | CAIN Impact |
| POST | /fabric/impact/simulate | Simulate Whatif | CAIN Impact |
| GET | /fabric/impact/status | Status | CAIN Impact |
| GET | /fabric/kill-switch | Whether this tenant's agents are halted | Trust Fabric |
| POST | /fabric/kill-switch | Halt every subsequent action for this tenant | Trust Fabric |
| DELETE | /fabric/kill-switch | Release the halt and allow actions again | Trust Fabric |
| POST | /fabric/mcp/enforce | Enforce | CAIN 16 MCP Enforcement |
| POST | /fabric/mcp/l5/authorize | L5 Authorize | CAIN 16 MCP Enforcement |
| GET | /fabric/mcp/system/key | Governance Key | CAG-L5 System Governor |
| POST | /fabric/mcp/system/{tenant}/evolution/propose | Evolution Propose | CAG-L5 System Governor |
| GET | /fabric/memory/ | Api List Memories | CAIN Memory |
| POST | /fabric/memory/consolidate | Api Consolidate Memories | CAIN Memory |
| DELETE | /fabric/memory/delete/{memory_id} | Api Delete Memory | CAIN Memory |
| POST | /fabric/memory/expire | Api Expire Memories | CAIN Memory |
| GET | /fabric/memory/get/{memory_id} | Api Get Memory | CAIN Memory |
| GET | /fabric/memory/health | Api Memory Health | CAIN Memory |
| GET | /fabric/memory/operations | Api Get Operations | CAIN Memory |
| POST | /fabric/memory/quarantine/{memory_id} | Api Quarantine Memory | CAIN Memory |
| POST | /fabric/memory/query | Api Query Memories | CAIN Memory |
| GET | /fabric/memory/stats | Api Get Stats | CAIN Memory |
| POST | /fabric/memory/store | Api Store Memory | CAIN Memory |
| POST | /fabric/memory/trust/{memory_id} | Api Set Trust Level | CAIN Memory |
| PATCH | /fabric/memory/update/{memory_id} | Api Update Memory | CAIN Memory |
| POST | /fabric/memory/{memory_id}/demote | Api Demote Memory | CAIN Memory |
| POST | /fabric/memory/{memory_id}/forget | Api Forget Memory | CAIN Memory |
| GET | /fabric/memory/{memory_id}/history | Api Get Memory History | CAIN Memory |
| POST | /fabric/memory/{memory_id}/promote | Api Promote Memory | CAIN Memory |
| GET | /fabric/memory/{memory_id}/provenance | Api Get Memory Provenance | CAIN Memory |
| POST | /fabric/memory/{memory_id}/restore | Api Restore Memory | CAIN Memory |
| POST | /fabric/memory/{memory_id}/revoke | Api Revoke Memory | CAIN Memory |
| GET | /fabric/memory/{memory_id}/usage | Api Get Memory Usage | CAIN Memory |
| POST | /fabric/memory/{memory_id}/validate | Api Validate Memory | CAIN Memory |
| GET | /fabric/plans | List Plans | CAIN Planner |
| POST | /fabric/plans | Create Plan | CAIN Planner |
| POST | /fabric/plans/candidates | Generate Candidates | CAIN Planner |
| POST | /fabric/plans/generate | Generate Plan | CAIN Planner |
| GET | /fabric/plans/stats | Get Planner Stats | CAIN Planner |
| GET | /fabric/plans/{plan_id} | Get Plan | CAIN Planner |
| POST | /fabric/plans/{plan_id}/approve | Approve Plan | CAIN Planner |
| POST | /fabric/plans/{plan_id}/cancel | Cancel Plan | CAIN Planner |
| POST | /fabric/plans/{plan_id}/compare | Compare Plan | CAIN Planner |
| GET | /fabric/plans/{plan_id}/evidence | Get Plan Evidence | CAIN Planner |
| POST | /fabric/plans/{plan_id}/execute | Execute Plan | CAIN Planner |
| GET | /fabric/plans/{plan_id}/provenance | Get Plan Provenance | CAIN Planner |
| POST | /fabric/plans/{plan_id}/reject | Reject Plan | CAIN Planner |
| POST | /fabric/plans/{plan_id}/replan | Replan | CAIN Planner |
| POST | /fabric/plans/{plan_id}/revalidate | Revalidate Plan | CAIN Planner |
| GET | /fabric/plans/{plan_id}/trajectory | Get Plan Trajectory | CAIN Planner |
| POST | /fabric/plans/{plan_id}/validate | Validate Plan | CAIN Planner |
| POST | /fabric/plans/{plan_id}/verify | Verify Plan | CAIN Planner |
| GET | /fabric/plans/{plan_id}/versions | Get Plan Versions | CAIN Planner |
| GET | /fabric/policy | The live policy: version, modules, and how it is addressed | Trust Fabric |
| POST | /fabric/policy/dryrun | What would happen to my recent traffic under different enforcement | Trust Fabric |
| POST | /fabric/policy/evaluate | Ask the live policy engine about a hypothetical call | Trust Fabric |
| GET | /fabric/proof | The latest proof run: every claim, executed | Trust Fabric |
| GET | /fabric/proof/history | Every proof run, hash-chained | Trust Fabric |
| POST | /fabric/proof/run | Execute every check and publish the result | Trust Fabric |
| POST | /fabric/resilience/analyze | Analyze Recovery | CAIN Resilience |
| GET | /fabric/resilience/checkpoints | List Checkpoints | CAIN Resilience |
| GET | /fabric/resilience/checkpoints/{checkpoint_id} | Get Checkpoint | CAIN Resilience |
| GET | /fabric/resilience/dashboard | Resilience Dashboard | CAIN Resilience |
| GET | /fabric/resilience/evidence/{plan_id} | Get Recovery Evidence | CAIN Resilience |
| GET | /fabric/resilience/health | Resilience Health | CAIN Resilience |
| POST | /fabric/resilience/plan | Plan Recovery | CAIN Resilience |
| GET | /fabric/resilience/plans | List Plans | CAIN Resilience |
| GET | /fabric/resilience/plans/{plan_id} | Get Plan | CAIN Resilience |
| POST | /fabric/resilience/plans/{plan_id}/authorize | Authorize Plan | CAIN Resilience |
| POST | /fabric/resilience/plans/{plan_id}/cancel | Cancel Recovery | CAIN Resilience |
| POST | /fabric/resilience/plans/{plan_id}/deny | Deny Plan | CAIN Resilience |
| POST | /fabric/resilience/plans/{plan_id}/execute | Execute Recovery | CAIN Resilience |
| GET | /fabric/resilience/plans/{plan_id}/verify | Verify Recovery Criteria | CAIN Resilience |
| POST | /fabric/resilience/simulate | Simulate Recovery | CAIN Resilience |
| GET | /fabric/resilience/snapshots/{snapshot_id} | Get Snapshot | CAIN Resilience |
| GET | /fabric/resilience/states | List Recovery States | CAIN Resilience |
| GET | /fabric/resilience/status | Resilience Status | CAIN Resilience |
| GET | /fabric/resilience/targets | List Recovery Targets | CAIN Resilience |
| GET | /fabric/security/autonomy-trust/{agent_id} | Get Autonomy Trust State | CAIN Agent Security |
| POST | /fabric/security/contain/{agent_id} | Contain Agent | CAIN Agent Security |
| POST | /fabric/security/evaluate | Evaluate Security | CAIN Agent Security |
| GET | /fabric/security/health | Security Health | CAIN Agent Security |
| GET | /fabric/security/incidents | Get Incidents | CAIN Agent Security |
| GET | /fabric/security/posture | List Postures | CAIN Agent Security |
| POST | /fabric/security/posture | Create Or Update Posture | CAIN Agent Security |
| GET | /fabric/security/posture/{agent_id} | Get Agent Posture | CAIN Agent Security |
| GET | /fabric/security/threats | Get Threats | CAIN Agent Security |
| GET | /fabric/sentinel/dashboard | Sentinel Dashboard | CAIN Sentinel |
| POST | /fabric/sentinel/evaluate | Evaluate Trust | CAIN Sentinel |
| GET | /fabric/sentinel/health | Sentinel Health | CAIN Sentinel |
| GET | /fabric/sentinel/incidents | List Incidents | CAIN Sentinel |
| GET | /fabric/sentinel/incidents/{incident_id} | Get Incident | CAIN Sentinel |
| POST | /fabric/sentinel/incidents/{incident_id}/close | Close Incident | CAIN Sentinel |
| POST | /fabric/sentinel/incidents/{incident_id}/contain | Contain Incident | CAIN Sentinel |
| GET | /fabric/sentinel/incidents/{incident_id}/evidence | Get Incident Evidence | CAIN Sentinel |
| GET | /fabric/sentinel/incidents/{incident_id}/impact | Get Incident Impact | CAIN Sentinel |
| POST | /fabric/sentinel/incidents/{incident_id}/recover | Recover Incident | CAIN Sentinel |
| POST | /fabric/sentinel/incidents/{incident_id}/restore | Restore Incident | CAIN Sentinel |
| POST | /fabric/sentinel/incidents/{incident_id}/reverify | Reverify Incident | CAIN Sentinel |
| GET | /fabric/sentinel/incidents/{incident_id}/timeline | Get Incident Timeline | CAIN Sentinel |
| GET | /fabric/sentinel/policies | List Policies | CAIN Sentinel |
| POST | /fabric/sentinel/policies | Create Policy | CAIN Sentinel |
| POST | /fabric/sentinel/simulate | Simulate Response | CAIN Sentinel |
| GET | /fabric/sentinel/status | Sentinel Status | CAIN Sentinel |
| GET | /fabric/sentinel/transitions | Get Transitions | CAIN Sentinel |
| GET | /fabric/sentinel/trust-state | Get Trust State | CAIN Sentinel |
| GET | /fabric/services | Every live service, with its Trust Fabric domain | Trust Fabric |
| GET | /fabric/settings | This tenant's enforcement mode | Trust Fabric |
| POST | /fabric/settings | Switch this tenant between shadow and enforce | Trust Fabric |
| GET | /fabric/simulate | Replay recorded decisions under proposed settings | Trust Fabric |
| GET | /fabric/skills | List Skills | CAIN Skills |
| POST | /fabric/skills | Create Skill | CAIN Skills |
| GET | /fabric/skills/health | Skills Health | CAIN Skills |
| GET | /fabric/skills/risk-levels | List Risk Levels | CAIN Skills |
| GET | /fabric/skills/states | List Skill States | CAIN Skills |
| GET | /fabric/skills/stats | Get Stats | CAIN Skills |
| GET | /fabric/skills/types | List Skill Types | CAIN Skills |
| GET | /fabric/skills/{skill_id} | Get Skill | CAIN Skills |
| POST | /fabric/skills/{skill_id}/activate | Activate Skill | CAIN Skills |
| POST | /fabric/skills/{skill_id}/approve | Approve Skill | CAIN Skills |
| POST | /fabric/skills/{skill_id}/execute | Execute Skill | CAIN Skills |
| GET | /fabric/skills/{skill_id}/executions | Get Skill Executions | CAIN Skills |
| GET | /fabric/skills/{skill_id}/provenance | Get Skill Provenance | CAIN Skills |
| POST | /fabric/skills/{skill_id}/revoke | Revoke Skill | CAIN Skills |
| POST | /fabric/skills/{skill_id}/security-scan | Security Scan Skill | CAIN Skills |
| PATCH | /fabric/skills/{skill_id}/state | Update Skill State | CAIN Skills |
| POST | /fabric/skills/{skill_id}/suspend | Suspend Skill | CAIN Skills |
| POST | /fabric/skills/{skill_id}/test | Test Skill | CAIN Skills |
| POST | /fabric/skills/{skill_id}/validate | Validate Skill | CAIN Skills |
| GET | /fabric/skills/{skill_id}/versions | Get Skill Versions | CAIN Skills |
| GET | /fabric/sso | This workspace's single sign-on connection | Enterprise sign-in (SSO, SCIM) |
| PUT | /fabric/sso | Register this workspace's OpenID Connect identity provider | Enterprise sign-in (SSO, SCIM) |
| DELETE | /fabric/sso | Remove single sign-on (members keep their memberships) | Enterprise sign-in (SSO, SCIM) |
| POST | /fabric/sso/scim-token | Mint the SCIM provisioning token (shown once) | Enterprise sign-in (SSO, SCIM) |
| DELETE | /fabric/sso/scim-token | Revoke the SCIM provisioning token | Enterprise sign-in (SSO, SCIM) |
| GET | /fabric/status | Which Fabric stages are live and enforcing right now | Trust Fabric |
| GET | /fabric/team | This workspace's members, invites and your role | Trust Fabric |
| POST | /fabric/team/accept | Join a workspace with an invite (signed-in CAIN account) | Trust Fabric |
| GET | /fabric/team/invite-info | What an invite link is for (no sign-in needed) | Trust Fabric |
| POST | /fabric/team/invites | Invite someone by email | Trust Fabric |
| DELETE | /fabric/team/invites/{invite_id} | Withdraw an invite | Trust Fabric |
| PUT | /fabric/team/members/{member_id} | Change a member's role | Trust Fabric |
| DELETE | /fabric/team/members/{member_id} | Remove a member (or leave, for yourself) | Trust Fabric |
| GET | /fabric/team/memberships | Workspaces your CAIN account belongs to | Trust Fabric |
| PUT | /fabric/team/name | Name this workspace | Trust Fabric |
| POST | /fabric/team/session | Open a workspace as a member (returns a short-lived member token) | Trust Fabric |
| GET | /fabric/tool-rules | This tenant's tool rules, in evaluation order | Trust Fabric |
| POST | /fabric/tool-rules | Add a tool rule | Trust Fabric |
| PUT | /fabric/tool-rules-default | What happens when no tool rule matches | Trust Fabric |
| GET | /fabric/tool-rules-history | Every change to this tenant's tool rules | Trust Fabric |
| POST | /fabric/tool-rules/test | Which rule would decide this call? (no evidence, no quota) | Trust Fabric |
| PUT | /fabric/tool-rules/{rule_id} | Change a tool rule (its version increments) | Trust Fabric |
| DELETE | /fabric/tool-rules/{rule_id} | Retire a tool rule (kept in history, never deleted) | Trust Fabric |
| GET | /fabric/toolargs/schemas | Registered tool schemas for argument validation | Trust Fabric |
| PUT | /fabric/toolargs/schemas | Register or replace a tool schema (operator-admin) | Trust Fabric |
| GET | /fabric/tools | Every tool this tenant's agents called, and which rule governs it | Trust Fabric |
| GET | /fabric/traces/ | List Traces | CAIN Trace |
| POST | /fabric/traces/ | Create Trace | CAIN Trace |
| GET | /fabric/traces/health | Trace Health | CAIN Trace |
| POST | /fabric/traces/search | Search Traces | CAIN Trace |
| GET | /fabric/traces/stats/summary | Get Stats | CAIN Trace |
| GET | /fabric/traces/{trace_id} | Get Trace Endpoint | CAIN Trace |
| POST | /fabric/traces/{trace_id}/decision | Record Trace Decision | CAIN Trace |
| GET | /fabric/traces/{trace_id}/events | Get Trace Events | CAIN Trace |
| GET | /fabric/traces/{trace_id}/evidence | Get Trace Evidence | CAIN Trace |
| POST | /fabric/traces/{trace_id}/finalize | Finalize Trace | CAIN Trace |
| GET | /fabric/traces/{trace_id}/graph | Get Trace Graph | CAIN Trace |
| GET | /fabric/trajectories | Recent agent runs for this tenant | Trust Fabric |
| GET | /fabric/trajectories/ | List Trajectories | CAIN Trajectory |
| POST | /fabric/trajectories/ | Create Trajectory | CAIN Trajectory |
| POST | /fabric/trajectories/passport/issue | Issue Passport | CAIN Trajectory |
| POST | /fabric/trajectories/passport/verify | Verify Passport | CAIN Trajectory |
| GET | /fabric/trajectories/passport/{passport_id} | Get Passport | CAIN Trajectory |
| POST | /fabric/trajectories/passport/{passport_id}/revoke | Revoke Passport | CAIN Trajectory |
| GET | /fabric/trajectories/policies | List Policies | CAIN Trajectory |
| POST | /fabric/trajectories/policies | Create Policy | CAIN Trajectory |
| GET | /fabric/trajectories/policies/{policy_id} | Get Policy | CAIN Trajectory |
| GET | /fabric/trajectories/state/{agent_id} | Get Agent Trust State | CAIN Trajectory |
| GET | /fabric/trajectories/{chain_id} | Reconstruct one agent run, in order | Trust Fabric |
| POST | /fabric/trajectories/{chain_id}/analyse | Grade this run's path and attribute its failure | Trust Fabric |
| GET | /fabric/trajectories/{trajectory_id} | Get Trajectory | CAIN Trajectory |
| POST | /fabric/trajectories/{trajectory_id}/cancel | Cancel Trajectory | CAIN Trajectory |
| POST | /fabric/trajectories/{trajectory_id}/complete | Complete Trajectory | CAIN Trajectory |
| POST | /fabric/trajectories/{trajectory_id}/counterfactual | Evaluate Counterfactual | CAIN Trajectory |
| POST | /fabric/trajectories/{trajectory_id}/decide | Make Trajectory Decision | CAIN Trajectory |
| POST | /fabric/trajectories/{trajectory_id}/evaluate | Evaluate Action | CAIN Trajectory |
| GET | /fabric/trajectories/{trajectory_id}/events | Get Trajectory Events | CAIN Trajectory |
| POST | /fabric/trajectories/{trajectory_id}/events | Record Event To Trajectory | CAIN Trajectory |
| GET | /fabric/trajectories/{trajectory_id}/evidence | Get Trajectory Evidence | CAIN Trajectory |
| GET | /fabric/trajectories/{trajectory_id}/proof | Get Trajectory Proof | CAIN Trajectory |
| GET | /fabric/trajectories/{trajectory_id}/score | Get Trajectory Score | CAIN Trajectory |
| POST | /fabric/trajectories/{trajectory_id}/verify | Verify Trajectory Chain | CAIN Trajectory |
| GET | /fabric/trust-score | Heuristic trust score, with its arithmetic shown | Trust Fabric |
| GET | /fabric/try | What the no-signup demo can show you | Trust Fabric |
| POST | /fabric/try | See CAIN decide on a real action -- no account needed | Trust Fabric |
| GET | /fabric/webhooks | Where this tenant gets notified | Trust Fabric |
| POST | /fabric/webhooks | Get notified when an action is held, blocked or halted | Trust Fabric |
| GET | /fabric/webhooks/deliveries | What was sent, and what failed | Trust Fabric |
| DELETE | /fabric/webhooks/{endpoint_id} | Stop notifying this endpoint | Trust Fabric |