api/operations.yaml · PARITY_REQUIRED
One handler.
Two encodings.
Live generated inventory: docs/generated/api-parity.md. Policy: API_PARITY.md.
Operations
| ID | Scope | REST | MCP |
|---|---|---|---|
| system.status.get | state:read | GET /api/v1/status | taclab.system.status.get · taclab://status |
| system.build.get | state:read | GET /api/v1/build | taclab.system.build.get · taclab://build |
| config.effective.get | state:read | GET /api/v1/config/effective | taclab.config.effective.get |
| config.validate | state:write | POST /api/v1/config/validate | taclab.config.validate |
| config.reload | config:reload | POST /api/v1/config/reload | taclab.config.reload |
| config.export | config:export | GET /api/v1/config/export | taclab.config.export |
| runtime.reset | runtime:reset | POST /api/v1/runtime/reset | taclab.runtime.reset |
| users.* | state:read / write | /api/v1/users | taclab.users.* · taclab://users |
| groups.* | state:read / write | /api/v1/groups | taclab.groups.* · taclab://groups |
| clients.* | state:read / write | /api/v1/clients | taclab.clients.* · taclab://clients |
| tokens.* | tokens:manage | /api/v1/tokens | taclab.tokens.* |
| policy.evaluate | policy:test | POST /api/v1/policy/evaluate | taclab.policy.evaluate |
| authentication.test | policy:test | POST /api/v1/authentication/test | taclab.authentication.test |
| events.list | events:read | GET /api/v1/events | taclab.events.list · taclab://events/recent |
| events.subscribe | events:read | GET /api/v1/events/stream SSE | subscriptions/listen (URI only) |
Scopes (exact match)
state:write does not imply tokens:manage, config:reload, or runtime:reset.
state:read · state:write · config:reload · config:export · policy:test · events:read · events:sensitive · tokens:manage · runtime:reset
REST-only / MCP-only
| GET /health/live · /health/ready | REST_ONLY_PROTOCOL |
| GET /api/openapi.json | REST_ONLY_PROTOCOL |
| POST/DELETE /api/v1/session | REST_ONLY_PROTOCOL (cookie + CSRF) |
| server/discover · tools/list · resources/list | MCP_ONLY_PROTOCOL |
| notifications/list_changed | MCP_ONLY_PROTOCOL |