Arsenal Broker

Preview documentation. Full endpoint reference lands with Arsenal 0.2.0. Core endpoints below are stable.

Endpoints

Method	Path	Purpose
`POST`	`/v1/capabilities`	Issue an ACT
`POST`	`/v1/secrets`	Deliver a wrapped secret
`POST`	`/v1/tokens/verify`	Verify an ACT
`POST`	`/v1/tokens/revoke`	Revoke an ACT
`POST`	`/v1/proxy`	Proxy an API request with credential injection
`POST`	`/v1/consent/*`	Human consent workflows

All endpoints require mTLS in production. SSRF guard (DNS rebinding protection) is enforced on every proxy call.