HTTP API
Learn how to authenticate and send requests to the EnderDash HTTP API.
About this API
EnderDash generates this authenticated HTTP API from the app's oRPC router.
This API does not use the live browser-to-agent connection. The live connection uses protobuf RPC over WebRTC data channels, with signaling relay fallback.
Authentication
The HTTP API accepts either:
- a signed-in EnderDash session cookie
- a user API key sent as
X-API-Key
It does not accept per-server agent keys or OAuth access tokens. Account OAuth and Game OAuth provide sign-in for other applications. Their access tokens belong to their respective OAuth endpoints.
Agent keys do not authenticate the HTTP API
Agent keys only register an agent to a server record. Use a browser session or user API key for HTTP requests.
OpenAPI documents
- Production schema:
https://app.enderdash.com/openapi.json - Local development schema:
https://app.enderdash.localhost:1355/openapi.json - Generated docs section: OpenAPI
Import the schema into an OpenAPI tool to create requests. You can use tools such as Postman or Insomnia.
Base path and request model
The OpenAPI-compatible API uses the /api/http base path. The dashboard uses a different oRPC endpoint at /api/rpc.
External HTTP clients must use /api/http.
| Operation type | Path shape | Input format |
|---|---|---|
| Query | GET /api/http/<router>/<procedure> | Individual URL query parameters |
| Mutation | POST /api/http/<router>/<procedure> | A JSON request body |
Successful responses contain the result as JSON. The API does not put the result inside an RPC envelope.
Errors use the oRPC HTTP body. This body contains the code, status, and message fields.
Use the generated schema as the source of truth. It defines all parameters, message bodies, and status codes.
What is included
The generated HTTP API includes procedures from these dashboard routers:
activityadminalertsauthchatintegrationsknowledgenotificationsocelotorganizationspwaservers
The admin router manages dashboard-account OAuth clients and requires an EnderDash platform admin.
Game OAuth client procedures belong to organizations and require organization owner or admin access.
The normal EnderDash access rules apply:
- organization membership
- server access
- admin-only procedures
- plan limits
What is not included
- WebRTC signaling and the browser-to-agent transport
- the dashboard's native batched oRPC transport at
/api/rpc - Ocelot streaming chat
Error behavior
| Status | Meaning |
|---|---|
400 | Invalid input |
401 | Missing authentication |
403 | Authenticated but not allowed |
404 | Resource not found |
409 | The resource state or plan limits blocked the request |
429 | Rate limit exceeded |
Practical curl example
curl \
-H 'X-API-Key: <user-api-key>' \
--get \
--data-urlencode 'organizationId=<organization-id>' \
'https://app.enderdash.com/api/http/servers/listServers'Related
Was this page helpful?
Send a quick note if anything is missing or unclear.
Last updated on
