Authentication
Public registry endpoints can be inspected without a Project Key. Runtime and workspace operations require signed-in context and scoped credentials.
Developers
SkillHub API
The API is the programmatic path from public Skill discovery to signed-in runtime invocation.
Public registry endpoints
Use registry/search endpoints to list public Skills, filter by task, runtime, verification state, and permission profile.
Manifest inspection
Skill detail endpoints expose manifest, schema, permissions, version, publisher, and review state before adoption.
Project Key runtime endpoints
Runtime invocation should authenticate with a Project Key created inside a signed-in project.
Errors and rate limits
API clients should handle validation errors, unauthorized calls, policy blocks, rate limits, missing Project Keys, and prelaunch payment gates.
Example request
POST /v1/runtime/invoke with Authorization: Bearer PROJECT_KEY and a Skill slug plus typed input payload.