> ## Documentation Index > Fetch the complete documentation index at: https://docs.duraton.ai/llms.txt > Use this file to discover all available pages before exploring further. # Overview > Do anything the console does from your own code: the Duraton HTTP API's base URL, authentication, conventions, and full endpoint map. Everything the console does goes through Duraton's HTTP API, and so can you. It is plain JSON over HTTP - no SDK required to trigger events, read runs, or control them. ```sh theme={null} curl "$DURATON_URL/runs?limit=5" \ -H "Authorization: Bearer $DURATON_API_KEY" ``` ## Base URL `DURATON_URL` is the Duraton API base: `https://run.duraton.dev`. All paths below are relative to it. ## Authentication Every request needs an API key, presented as a Bearer token. Issue one in the console under **API Keys**: ```sh theme={null} curl "$DURATON_URL/runs" \ -H "Authorization: Bearer $DURATON_API_KEY" ``` Keys carry a scope. A **public** (read-only) key can call the `GET` endpoints; writes (every `POST`, `PATCH`, and `DELETE`, plus the `/connect` upgrade) need a **secret** key. | Response | When | | ------------------ | ------------------------------------------------------------------------ | | `401 Unauthorized` | The key is missing or unknown. | | `403 Forbidden` | A public (read-only) key attempted a write, or the project is suspended. | ## Conventions * Request and response bodies are JSON. Send `POST` and `PATCH` bodies as a JSON object. * Reads return `200`; writes return `200`, `201`, `202`, or `204` depending on the route. The full map, and the failure codes, are in [errors](/reference/api/errors). * Listings are newest-first and bounded. `GET /runs`, `GET /webhook-deliveries`, and `GET /webhook-source-deliveries` use [keyset pagination](/reference/api/runs#keyset-pagination) via the `X-Next-Cursor` header; the other listings take a `limit` (see [limits](/reference/api/limits)). ## Runs | Method + path | Purpose | | ----------------------- | ------------------------------------------------------------------------------------------------------------- | | `GET /runs` | [List and filter runs](/reference/api/runs), newest first, with an `X-Next-Cursor` header. | | `GET /runs/{id}` | One run, with its input and result. | | `GET /runs/{id}/steps` | The run's steps, in order. | | `GET /runs/{id}/logs` | The run's [`ctx.log` lines](/reference/api/runs#run-logs), oldest first. | | `GET /runs/{id}/stream` | [Live SSE timeline](/reference/api/runs#live-run-stream) of one run (status + logs). | | `GET /runs/stream` | [Live SSE stream](/reference/api/runs#project-wide-run-stream) of run status transitions across the project. | | `GET /runs/stats` | [Aggregate run counts](/reference/api/runs#run-stats) for a filter. | | `GET /runs/timeseries` | [Run counts bucketed over time](/reference/api/runs#run-time-series), with duration averages. | | `GET /ai/spend` | [AI token/cost rollup](/reference/api/runs#ai-spend-&-sessions) - totals plus by-hour, by-model, by-workflow. | | `GET /sessions` | [Conversation sessions](/reference/api/runs#ai-spend-&-sessions): runs grouped by session id. | ## Control | Method + path | Purpose | | --------------------------------- | ---------------------------------------------------------------------------------- | | `POST /runs/{id}/cancel` | [Cancel](/reference/api/control) a run. | | `POST /runs/{id}/pause` | Pause a run at its next step boundary. | | `POST /runs/{id}/resume` | Resume a paused run. | | `POST /runs/{id}/replay` | Replay a finished run as a new run. | | `POST /runs/{id}/retry-from-step` | [Fork a finished run from a named step](/reference/api/control#retry-from-a-step). | | `POST /runs/bulk-replay` | [Replay every finished run matching a filter](/reference/api/control#bulk-replay). | | `GET /control-actions` | [The control-action audit log](/reference/api/control#audit-log), newest first. | ## Events | Method + path | Purpose | | -------------------- | ------------------------------------------------------------------------------ | | `POST /events` | [Trigger workflows](/reference/api/events) by sending an event. Returns `202`. | | `GET /events` | [Read the event log](/reference/api/events#reading-the-log). | | `GET /events/{id}` | One event log record. | | `GET /events/stream` | Live event tail (Server-Sent Events). | ## Approvals | Method + path | Purpose | | ------------------------------- | ------------------------------------------------------------------ | | `GET /approvals` | [The project's approvals](/reference/api/approvals), newest first. | | `GET /approvals/{id}` | One approval, with its proposed tool call. | | `POST /approvals/{id}/decision` | Approve or deny an open approval; the parked run resumes. | ## Webhooks | Method + path | Purpose | | ------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------- | | `POST /webhooks/{token}` | Public: a [signature-verified inbound webhook](/integrations/webhooks) mapped onto an event. Returns `202`. | | `GET /webhook-deliveries` | [The outbound delivery log](/reference/api/webhooks), newest first. | | `GET /webhook-deliveries/{id}` | One delivery with its attempt log. | | `POST /webhook-deliveries/{id}/redeliver` | Re-queue a delivery for a fresh attempt. Returns `204`. | | `GET /webhook-source-deliveries` | [The inbound source delivery log](/reference/api/webhooks#the-inbound-delivery-log), newest first. | | `GET /webhook-source-deliveries/{id}` | One inbound delivery with its stored body and attempt log. | | `POST /webhook-source-deliveries/{id}/replay` | Re-ingest a verified inbound delivery's stored body. Returns `200` with the replay outcome. | | `GET` `POST` `PATCH` `DELETE /webhook-endpoints[/{id}]` | [Manage outbound subscriptions](/reference/api/webhooks#managing-endpoints-and-sources) (secrets shown once). | | `GET /webhook-endpoints/stats` | Per-endpoint delivery health over a window. | | `GET` `POST` `PATCH` `DELETE /webhook-sources[/{id}]` | Manage inbound sources (secrets shown once). | ## Registry | Method + path | Purpose | | -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | | `GET /workflows` | List registered workflows, each with its `flowControl` config and the advisory `steps` manifest when declared. | | `POST /workflows/{app}/{name}/trigger` | [Start one off-schedule run](/reference/api/workflows#trigger-a-run-manually) of a registered workflow - works even for a cron-only workflow. Returns `202`. | | `GET /apps` | [List registered apps](/reference/api/runners#get-/apps). | | `GET /runners` | [List connected runners](/reference/api/runners) with their metadata and liveness. | | `GET /flow-state` | [Live flow-control buffers](/core/flow-control#observing-flow-control) (debounce, batch, concurrency draw). | The runner protocol (`POST /register`, the invoke call, `GET /connect`) is documented separately in the [protocol reference](/reference/wire-protocol), and the same operations are available to AI agents as [MCP tools](/integrations/mcp-server).