API Auth and Webhooks
Bearer token auth:
Authorization: Bearer <RILO_API_BEARER_TOKEN>
Jobs:
POST /jobsGET /jobs/:jobId
Projects:
GET /projectsPOST /projectsGET /projects/:projectPATCH /projects/:project/configPATCH /projects/:project/metadataPATCH /projects/:project/contentPOST /projects/:project/regenerate
Project introspection:
GET /projects/:project/logsGET /projects/:project/promptsGET /projects/:project/artifactsGET /projects/:project/syncGET /projects/:project/snapshotsGET /projects/:project/analyticsGET /projects/:project/analytics/runsGET /projects/:project/analytics/runs/:runId
Docs and webhooks:
GET /docsGET /openapi.jsonPOST /webhooks/replicate
Use WEBHOOK_SECRET for webhook verification where configured.
Configure RILO_API_BEARER_TOKEN with rilo settings, or use npm run dev -- settings when working from a checked-out repository. Webhook and Firebase configuration remain environment-variable only.
For interactive schemas and examples, use /docs while the API server is running.