Catalogs & configuration history

Read existing tenant resources to build valid configuration, and inspect the history of configuration changes. These APIs do not expose inference traffic logs or operational reporting.

Existing resources only

Smart groups are read/reference-only. Use an existing group_name in self-service access rules, group-specific app controls or QuilrQL. Management callers cannot create groups, change their members or delete them.

Custom definitions are also read/reference-only. Resolve a definition_id before selecting it in app controls. Actions, selection and request/response scope can be configured for existing definitions; regex bodies, EDM data, intent examples and semantic definitions cannot be authored here.

New group/definition content must be created through its existing authorized administration flow. A nested app update, provider conversion or rollback cannot be used to bypass this boundary.

App versions versus policy revisions

History	Restores	Does not restore
App configuration version	Eligible settings for one canonical app, as a new version.	Shared provider state, gateway key lifecycle, tenant groups/definitions or policy authority.
Policy revision	A validated historical policy document, republished as a new revision.	Provider secrets or the app's independent lifecycle state.

App rollback applies current rules, references and permissions. It must reject changes that would author a definition, edit group membership, change inline provider credentials or convert a shared-provider app back to inline storage. Rollback requires the current app ETag, not the historical version's ETag.

Audit reads

The audit feed records configuration operations and management-principal identity with redacted diffs. Optional filters cover app name, operation, management-key ID and time range. Times use RFC 3339 with an explicit timezone; from must not be after to.

Pagination uses an opaque cursor bound to the current collection and filters. Detailed pagination and error rules apply to all list endpoints.

Endpoint reference

GET/smart-groups

List smart groups

Read existing tenant resources for selection. No create/update/delete operation exists.

REQUIRESread

Path, query & header parameters 3

limit (query)integeroptional

Items per page.

min: 1max: 200default: 50

cursor (query)stringoptional

Opaque cursor returned by this same collection and filters.

q (query)stringoptional

Name search.

No request body.

curl --request GET \
  'https://management.example.com/llmgateway/management/v1/smart-groups?limit=50' \
  --header 'Authorization: Bearer <management-key>'

Authentication, errors & retry rules

GET/smart-groups/{group_name}

Read a smart group

Read metadata for an existing tenant resource. Membership and definition contents cannot be edited through management.

REQUIRESread

Path, query & header parameters 1

group_name (path)stringrequired

min length: 1

No request body.

curl --request GET \
  'https://management.example.com/llmgateway/management/v1/smart-groups/engineering' \
  --header 'Authorization: Bearer <management-key>'

Authentication, errors & retry rules

GET/custom-definitions

List custom definitions

Read existing tenant resources for selection. No create/update/delete operation exists.

REQUIRESread

Path, query & header parameters 3

limit (query)integeroptional

Items per page.

min: 1max: 200default: 50

cursor (query)stringoptional

Opaque cursor returned by this same collection and filters.

q (query)stringoptional

Name search.

No request body.

curl --request GET \
  'https://management.example.com/llmgateway/management/v1/custom-definitions?limit=50' \
  --header 'Authorization: Bearer <management-key>'

Authentication, errors & retry rules

GET/custom-definitions/{definition_id}

Read a custom definition

Read metadata for an existing tenant resource. Membership and definition contents cannot be edited through management.

REQUIRESread

Path, query & header parameters 1

definition_id (path)stringrequired

min length: 1

No request body.

curl --request GET \
  'https://management.example.com/llmgateway/management/v1/custom-definitions/employee_id' \
  --header 'Authorization: Bearer <management-key>'

Authentication, errors & retry rules

GET/apps/{app_name}/versions

List app configuration versions

Read redacted configuration-change metadata. This is not inference request-log reporting.

REQUIRESread

Path, query & header parameters 3

app_name (path)stringrequired

Trimmed display name. App lookup is case-insensitive within the authenticated tenant. Ambiguous legacy names return 409.

min length: 1max length: 200

limit (query)integeroptional

Items per page.

min: 1max: 200default: 50

cursor (query)stringoptional

Opaque cursor returned by this same collection and filters.

No request body.

curl --request GET \
  'https://management.example.com/llmgateway/management/v1/apps/Support%20Bot/versions?limit=50' \
  --header 'Authorization: Bearer <management-key>'

Authentication, errors & retry rules

GET/apps/{app_name}/versions/{version_id}

Read a configuration version

Read a redacted app configuration snapshot and change summary; no provider or gateway secrets.

REQUIRESread

Path, query & header parameters 2

app_name (path)stringrequired

Trimmed display name. App lookup is case-insensitive within the authenticated tenant. Ambiguous legacy names return 409.

min length: 1max length: 200

version_id (path)stringrequired

min length: 1

No request body.

curl --request GET \
  'https://management.example.com/llmgateway/management/v1/apps/Support%20Bot/versions/version_example' \
  --header 'Authorization: Bearer <management-key>'

Authentication, errors & retry rules

POST/apps/{app_name}/versions/{version_id}/rollback

Roll back app configuration

Restore permitted app settings as a new version. Check all current scope/reference rules. Does not restore shared providers, policy revisions, groups, definitions or gateway key lifecycle.

REQUIRESconfig:write

Path, query & header parameters 4

app_name (path)stringrequired

Trimmed display name. App lookup is case-insensitive within the authenticated tenant. Ambiguous legacy names return 409.

min length: 1max length: 200

version_id (path)stringrequired

min length: 1

If-Match (header)stringrequired

Exact quoted ETag from a current resource read.

Idempotency-Key (header)stringrequired

Unique operation key. Reuse only with the identical request; mismatch returns 409.

min length: 1max length: 128

Full request body specification application/json

messagestringoptional

Optional audit reason.

max length: 500

Unknown fields are rejected in this object.

curl --request POST \
  'https://management.example.com/llmgateway/management/v1/apps/Support%20Bot/versions/version_example/rollback' \
  --header 'Authorization: Bearer <management-key>' \
  --header 'If-Match: "resource-version"' \
  --header 'Idempotency-Key: operation-001' \
  --header 'Content-Type: application/json' \
  --data '{
  "message": "Restore the previous timeout"
}'

Authentication, errors & retry rules

GET/audit-events

Read configuration audit

Read management/configuration audit, with redacted diffs. No gateway request bodies, usage reports or traffic logs.

REQUIRESread

Path, query & header parameters 7

limit (query)integeroptional

Items per page.

min: 1max: 200default: 50

cursor (query)stringoptional

Opaque cursor returned by this same collection and filters.

app_name (query)stringoptional

Trimmed display name. App lookup is case-insensitive within the authenticated tenant. Ambiguous legacy names return 409.

min length: 1max length: 200

operation (query)stringoptional

management_key_id (query)stringoptional

from (query)stringoptional

format: date-time

to (query)stringoptional

format: date-time

No request body.

curl --request GET \
  'https://management.example.com/llmgateway/management/v1/audit-events?limit=50' \
  --header 'Authorization: Bearer <management-key>'

Authentication, errors & retry rules

Existing resources only​

App versions versus policy revisions​

Audit reads​

Endpoint reference​

Existing resources only

App versions versus policy revisions

Audit reads

Endpoint reference