API reference

Application endpoints

SV2DEV currently exposes authenticated browser endpoints for its own workspace. A public API-key product is not implemented.

Authentication

Browser endpoints require a signed-in, verified account and a CSRF token for mutations. Project ownership is checked for every request.

Workspace endpoints

GET  /projects/{project}/files
PUT  /projects/{project}/files
GET  /projects/{project}/generations
POST /projects/{project}/generations
POST /generations/{generation}/review
POST /generations/{generation}/cancel

Saving sends a revision number and an array of objects containing path and content. A stale revision returns HTTP 409. Generation sends prompt, mode, and model_id.

Errors

  • 401 or sign-in redirect: authentication required.
  • 403: permission, account, or verification restriction.
  • 409: conflict or an already active generation.
  • 422: invalid data or insufficient credits.
  • 429: rate limit reached.
  • 503: required integration is not configured.
Updated October 19, 2026