https://docs.pau1.cloud
Alle öffentlichen Beispiele verwenden diese Domain. Lokal läuft die App auf 127.0.0.1:8096.
Dieses Wiki ist der menschliche Einstieg in Pauls API-Schicht. Links ist die hierarchische Navigation, rechts stehen Konzept, Auth, Scopes, konkrete Endpoints, JSON-Beispiele und cURL-Kommandos.
Alle öffentlichen Beispiele verwenden diese Domain. Lokal läuft die App auf 127.0.0.1:8096.
Freunde bekommen begrenzte Tokens. Admin-Rechte bleiben getrennt.
Swagger, ReDoc und OpenAPI JSON sind parallel verfügbar.
Jeder private Endpoint erwartet einen API-Key. Es gibt zwei gleichwertige Header-Varianten:
Authorization: Bearer $TOKENX-API-Key: $TOKENScopes sind bewusst klein. Ein Freund bekommt nicht „die API“, sondern nur einzelne Fähigkeiten.
Echo-Service zum Prüfen von Auth und JSON.
Erstellt kompakte Briefings aus Text.
Deterministische Textzusammenfassung.
Empfängt Testevents und Payloads.
Erstellen, auditieren und widerrufen von Keys.
So gibst du Freunden gezielt Zugriff, ohne dein Agent-System komplett zu öffnen.
Nur die Scopes vergeben, die wirklich gebraucht werden. Beispiel: agent:brief + tools:summarize.
Für Freunde z.B. 30 Requests/Minute. Für Admins höher.
Raw Token wird nur einmal erzeugt. Danach nur noch Fingerprint sichtbar.
Wenn ein Token leakt oder zu breit ist: löschen und neu erstellen.
curl -X POST https://docs.pau1.cloud/v1/admin/keys \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"owner":"friend@example","scopes":["agent:brief","tools:summarize"],"note":"limited friend key","rate_limit_per_minute":30}'
Aktuell gibt es einen sicheren Test-Hook. Produktions-Hooks sollten später je Integration eigene Scopes und Signaturen bekommen.
Testempfänger für JSON Events.
Stripe Events mit Signaturprüfung.
Meta/Ads Lead- oder Conversion-Hooks.
n8n Workflows triggern.
Beschränkte agentische Aufgaben mit Queue und Kostenlimit.
Alle aktuellen Endpoints mit Zweck, Scope, Request/Response und kopierbarem cURL.
Simple uptime check for monitors, Traefik, and humans. Does not require an API key.
{
"ok": true,
"service": "agent-api-hub",
"time": "2026-05-23T21:00:00+00:00"
}
curl https://docs.pau1.cloud/health
Returns the current API key identity, granted scopes, and rate limit.
{
"key_id": "key_abc123",
"owner": "friend-demo",
"scopes": [
"agent:brief",
"tools:summarize"
],
"limits": {
"rate_limit_per_minute": 30
}
}
curl -H "Authorization: Bearer $TOKEN" https://docs.pau1.cloud/v1/me
Lists only the services that the current key is allowed to call.
{
"services": [
{
"id": "agent.brief",
"name": "Agent Brief",
"required_scope": "agent:brief",
"method": "POST",
"path": "/v1/agent/brief"
}
]
}
curl -H "X-API-Key: $TOKEN" https://docs.pau1.cloud/v1/services
Returns the submitted message and metadata unchanged. Useful for testing auth, JSON shape, and client plumbing.
{
"message": "Hello Paul",
"metadata": {
"source": "demo-client"
}
}
{
"message": "Hello Paul",
"metadata": {
"source": "demo-client"
},
"echoed_at": "2026-05-23T21:00:00+00:00"
}
curl -X POST https://docs.pau1.cloud/v1/agent/echo \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"message":"Hello Paul","metadata":{"source":"demo-client"}}'
Creates a deterministic brief from supplied text: compact summary, bullets, and word count.
{
"title": "Meeting notes",
"text": "Long text goes here...",
"bullets": 5
}
{
"title": "Meeting notes",
"summary": "Compact summary...",
"bullets": [
"Key point one",
"Key point two"
],
"word_count": 420
}
curl -X POST https://docs.pau1.cloud/v1/agent/brief \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"title":"Meeting notes","text":"FastAPI exposes scoped APIs. Friend keys only get selected services.","bullets":3}'
Ranks sentences by keyword frequency and returns the strongest sentences as a summary.
{
"text": "Sentence one. Sentence two. Sentence three.",
"sentences": 3
}
{
"summary": "Sentence one. Sentence three.",
"selected_sentences": [
"Sentence one.",
"Sentence three."
],
"sentence_count": 2
}
curl -X POST https://docs.pau1.cloud/v1/tools/summarize \
-H "X-API-Key: $TOKEN" \
-H "Content-Type: application/json" \
-d '{"text":"APIs need docs. Docs need examples. Examples reduce support.","sentences":2}'
Receives a named event with arbitrary JSON payload and returns a timestamped receipt.
{
"event": "demo.created",
"payload": {
"user": "friend-demo",
"value": 123
}
}
{
"ok": true,
"event": "demo.created",
"payload": {
"user": "friend-demo",
"value": 123
},
"received_at": "2026-05-23T21:00:00+00:00"
}
curl -X POST https://docs.pau1.cloud/v1/webhook/test \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"event":"demo.created","payload":{"user":"friend-demo","value":123}}'
Returns metadata for all known keys: owner, scopes, creation time, revocation state, rate limit, and fingerprint.
[
{
"id": "key_abc123",
"owner": "Paul Admin",
"scopes": [
"admin:keys",
"agent:brief"
],
"revoked_at": null,
"rate_limit_per_minute": 300,
"fingerprint": "sha256:abcd1234"
}
]
curl -H "Authorization: Bearer $ADMIN_TOKEN" https://docs.pau1.cloud/v1/admin/keys
Creates a new scoped key for a friend, customer, service, or integration. Raw token is returned once.
{
"owner": "friend@example",
"scopes": [
"agent:brief",
"tools:summarize"
],
"note": "limited friend key",
"rate_limit_per_minute": 30
}
{
"token": "bah_live_generated_once",
"key": {
"id": "key_abc123",
"owner": "friend@example",
"scopes": [
"agent:brief",
"tools:summarize"
],
"fingerprint": "sha256:abcd1234"
}
}
curl -X POST https://docs.pau1.cloud/v1/admin/keys \
-H "Authorization: Bearer $ADMIN_TOKEN" \
-H "Content-Type: application/json" \
-d '{"owner":"friend@example","scopes":["agent:brief","tools:summarize"],"note":"limited friend key","rate_limit_per_minute":30}'
Revokes a key by ID. Revoked keys can no longer authenticate.
{
"id": "key_abc123",
"revoked": true,
"revoked_at": "2026-05-23T21:00:00+00:00"
}
curl -X DELETE -H "Authorization: Bearer $ADMIN_TOKEN" https://docs.pau1.cloud/v1/admin/keys/key_abc123