Method + path straight from the SS-02 OpenAPI spec. Governed routes take an SS-01 bearer token and, where marked, an X-Tenant-Id; the S3 wire gateway authenticates with AWS SigV4 instead.
GET/api/v1/enginesbearer
Supported engines (name→workload class) and per-engine approved versions with EOL dates.
GET/api/v1/engines/catalogbearer
Full ADR-0069 admission catalogue: tier, license class, boundary, tenancy/backup/restore/residency, guidance.
POST/api/v1/vector-claimsbearertenantidempotency-key
Provision a per-tenant Qdrant collection (name + dimension required).
PUT/api/v1/claims/{name}/docs/{key}bearertenant
Write a document with optimistic concurrency (if_version) and per-item ttl_seconds.
GET/api/v1/claims/{name}/docs/{key}bearertenant
Read a document by key from a document/KV claim.
DELETE/api/v1/claims/{name}/docs/{key}bearertenant
Delete a document by key with a conditional if_version guard.
POST/api/v1/claims/{name}/pointsbearertenant
Ingest a batch of time-series points (ILP lane); each needs series + ts.
POST/api/v1/claims/{name}/querybearertenant
Query a time-series claim; downsample_seconds>0 returns average buckets, else raw points.