Organizations
Projects
- GETList org projects
- POSTCreate a project
- GETGet a project
- DELDelete a project
- PATCHRename or update a project
- GETList pinned agents for a project
- PUTReplace pinned agents
- GETList pinned sandboxes for a project
- PUTReplace pinned sandboxes
- GETList pinned workflows for a project
- PUTReplace pinned workflows
- GETList all mixed pinned resources for a project
- PUTReplace mixed pinned resources
Sandboxes
- GETList sandboxes
- POSTCreate a sandbox
- GETGet a sandbox
- DELDelete a sandbox
- PATCHUpdate sandbox metadata
- GETLive sandbox stats
- POSTExecute a command in a sandbox
- GETMint a capability dev URL
- POSTPause a sandbox
- POSTResume a paused sandbox
- GETGet SSH connection info
- GETGet VNC connection info (desktop sandboxes)
- GETGet sandbox logs (tail)
Activity
Agents
Agent marketplace
Agent runs
Threads
Installable agents
- GETList the installable-agent catalog
- GETList install records (active + recovering)
- POSTInstall an installable agent into a sandbox+workspace
- GETGet an install record
- DELUninstall or forget an install
- POSTConfigure a Hermes install's provider/model
- GETList Hermes threads inside the install
- POSTSend a chat message to Hermes
Attachments
Workspaces
Workspace files
- GETList directory entries at workspace root
- PUTBatch operation at workspace root
- POSTCreate an entry at workspace root
- DELDelete entries by ID at workspace root
- GETList entries at a sub-path
- PUTMutate a single entry at a sub-path
- POSTCreate an entry at a sub-path
- GETWorkspace drive info (used/free bytes)
- GETGet info for a path inside the workspace
- POSTUpload a file to the workspace root
- POSTUpload a file to a sub-path
- GETStream a file directly
Model proxy
Calendar
RunMesh
- POSTBegin a device-link flow (unauthenticated)
- POSTPoll for link approval (unauthenticated)
- POSTApprove a pending device-link request
- GETCounts of online/offline nodes
- GETList RunMesh nodes
- GETGet a RunMesh node
- DELRevoke a RunMesh node
- PATCHRename a RunMesh node
- POSTRevoke a node (POST alias)
- GETGenerate WireGuard peer config for a node
- GETList recent RunMesh audit events
API keys
SSH keys
LangTerm
OAuth connections
- GETList OAuth provider descriptors
- GETBegin a redirect OAuth flow
- GETOAuth callback (provider redirects here)
- POSTBegin a device-code OAuth flow (e.g. OpenAI Codex)
- POSTPoll the device-code status
- GETList OAuth connections for the caller
- GETGet an OAuth connection (metadata only)
- DELDelete an OAuth connection
- POSTMark an OAuth connection as default
- GETCheck if a provider is connected
BYOA configs
Secrets
Tools (marketplace)
Tools (installed)
Tool execution
Tools (custom)
Billing
- GETPublic pricing reference
- GETGet the org's credit balance
- GETGet credit ledger history
- GETGet the org's billing summary
- GETGet aggregate or per-user usage
- POSTCreate a Stripe Checkout session for a credit top-up
- GETEager-sync a completed Stripe checkout session
- GETGet auto-top-up settings
- PUTUpdate auto-top-up settings
- POSTRedeem a promo code
Begin a redirect OAuth flow
curl --request GET \
--url https://auth.runtools.ai/v1/oauth/start/{provider} \
--header 'Authorization: Bearer <token>'OAuth connections
Begin a redirect OAuth flow
Issues a 307 Temporary Redirect to the provider’s authorize URL.
Honors BYOA config when enabled.
GET
/
v1
/
oauth
/
start
/
{provider}
Begin a redirect OAuth flow
curl --request GET \
--url https://auth.runtools.ai/v1/oauth/start/{provider} \
--header 'Authorization: Bearer <token>'Documentation Index
Fetch the complete documentation index at: https://docs.runtools.ai/llms.txt
Use this file to discover all available pages before exploring further.
Authorizations
bearerapiKey
WorkOS session token or RunTools API key (rt_live_* / rt_test_*).
Used in Authorization: Bearer <token> header.
Path Parameters
Query Parameters
Comma-separated scope list (overrides provider defaults).
Optional localhost CLI redirect URI.
Response
307
Redirect to provider.
⌘I