Registry API
Authentication
Device authorization flow, token refresh and the current identity.
These operations back `wl login`, the CLI’s device authorization flow, and `wl whoami`.
Operations
| Request | What it does |
|---|---|
| POST /auth/device | Start a device authorization flow |
| POST /auth/token | Poll for or exchange a device-flow token |
| POST /auth/refresh | Refresh an access token |
| GET /auth/whoami | Current identity |
Paths come from the OpenAPI document that the API exports from its route definitions (CI fails if it is stale); this site checks its list against that file. The public registry search and package reads and the health checks work anonymously; most other operations need a signed-in session or an API key.
More areas
All areas →- 01
Public registry and blobs
Anonymous search and package pages, plus content-addressed blob storage.
- 02
Packages
Create packages, publish immutable versions, manage assets, approvals, render previews and reviews.
- 03
Workspaces
Workspace desired state: targets, revisions, the manifest the CLI pulls, overrides and policies.