Skip to content

Overview

The Mako REST API. All endpoints are prefixed with /api.

Authentication. Most endpoints accept either a session cookie (auth_session, set by POST /api/auth/login) or a workspace API key passed as Authorization: Bearer revops_<key>. Endpoints under /api/connectors, /api/databases, /api/share, and /api/webhooks are intentionally public.

This document is generated directly from the Zod route definitions, so it always reflects the validation and types the API enforces.

  • OpenAPI version: 3.1.0

Session cookie set by POST /api/auth/login. Used by browser clients.

Security scheme type: apiKey

Cookie parameter name: auth_session

Workspace API key. Send as Authorization: Bearer revops_<key>. Used by programmatic clients and agents.

Security scheme type: http