Preview documentation. Full endpoint reference lands with Arsenal 0.2.0. Core endpoints below are stable.

​
Endpoints

MethodPathPurpose
POST/v1/capabilitiesIssue an ACT
POST/v1/secretsDeliver a wrapped secret
POST/v1/tokens/verifyVerify an ACT
POST/v1/tokens/revokeRevoke an ACT
POST/v1/proxyProxy an API request with credential injection
POST/v1/consent/*Human consent workflows
All endpoints require mTLS in production. SSRF guard (DNS rebinding protection) is enforced on every proxy call.