Skip to main content
The Praxa Integration Gateway exposes a REST API at version 8.1.0 (contract: aura-integration-gateway-v8.1) for submitting and managing governed AI agent missions. Models, SDKs, CLIs, and MCP tools grant no action authority of their own — all effects are governed by the platform’s policy and consent controls. This reference covers all 14 endpoints available in v8.1.0.

​
Base URL

The base URL is the HTTPS origin of your Praxa Integration Gateway deployment. All endpoint paths in this reference are relative to that origin.
No shared workers.dev route exists for the Integration Gateway. You must use the canonical HTTPS origin of your own deployment.
Every request must use HTTPS. HTTP origins are rejected by the gateway.

​
API Version

The current API version is v8.1.0, accessible under the /v8/ path prefix. All v8 paths share a single wire-compatibility contract that is identified by the following header, which the server includes in every response:
You can use this header to confirm that the gateway you are talking to is running the expected contract version before you send mission payloads.

​
Endpoints Overview

The table below lists every endpoint exposed by the Integration Gateway. Click any endpoint in the Authentication or Errors pages to see full request and response schemas.
The /mcp endpoints sit outside the /v8/ prefix because they implement the MCP 2025-03-26 Streamable HTTP JSON-RPC protocol, which has its own versioning surface.

​
Response Format

All endpoints return JSON bodies (application/json) together with standard HTTP status codes. A 200 or 202 response means your request was accepted and the body contains the documented schema. When the gateway cannot fulfill a request, it returns an application/problem+json body following RFC 9457. Every problem response includes the following fields: See Errors for the full list of status codes and recovery steps.

​
Idempotency

Mutating operations (POST /v8/missions, POST /v8/missions/{runId}/signals, and POST /v8/missions/{runId}/cancel) require you to include an Idempotency-Key header on every call. Safe read operations (GET requests and search/query POST requests) do not require it.
The value must be a string between 16 and 128 characters, containing only alphanumeric characters and the symbols ., _, :, -. A UUID v4 string is the most common and recommended choice.
If you replay a mutating request with the same Idempotency-Key and the same request body, the gateway returns the original response without re-executing the operation. If you replay with the same key but a different body, you receive a 409 Conflict. See Errors for details.

Authentication

Learn how to obtain and send OAuth Bearer tokens, required scopes per endpoint, and how to handle auth errors.

Errors

Understand RFC 9457 problem+json responses, all HTTP status codes, and how to retry safely.