Application endpoints
SV2DEV currently exposes authenticated browser endpoints for its own workspace. A public API-key product is not implemented.
Authentication
Browser endpoints require a signed-in, verified account and a CSRF token for mutations. Project ownership is checked for every request.
Workspace endpoints
GET /projects/{project}/files
PUT /projects/{project}/files
GET /projects/{project}/generations
POST /projects/{project}/generations
POST /generations/{generation}/review
POST /generations/{generation}/cancel
Saving sends a revision number and an array of objects containing path and content. A stale revision returns HTTP 409. Generation sends prompt, mode, and model_id.
Errors
- 401 or sign-in redirect: authentication required.
- 403: permission, account, or verification restriction.
- 409: conflict or an already active generation.
- 422: invalid data or insufficient credits.
- 429: rate limit reached.
- 503: required integration is not configured.
Updated October 19, 2026