Registry API
Public catalog
Read public packages and published workspaces without signing in.
These are the only anonymous reads. Each returns a public-only view: the latest version of each public package (asset bodies stripped, metadata only) and published workspaces whose visibility is public.
Private or unknown names return 404, never 403, so a private package or workspace’s existence is not revealed.
Operations
| Request | What it does |
|---|---|
| GET /v1/public/packages | List the latest public packages |
| GET /v1/public/search | Search public packages (?q=) |
| GET /v1/public/packages/{name} | Get a public package, newest version or ?version= |
| GET /v1/public/workspaces | List published public workspaces |
| GET /v1/public/workspaces/{id} | Get a public workspace, newest revision or ?revision= |
Operations are the routes the server registers; this site checks its list against the route definitions. Operations marked “in spec” are also described in the committed OpenAPI file (apps/api/openapi.json), which does not yet cover every route. Only the public catalog and the health check work without a token.