HTTP API

Clients talk only to eve-iac-agent over HTTPS (default https://<eve-host>:8787). Native EVE REST on 127.0.0.1 is not a client API. The IDE MCP bridge is local stdio to the VSIX — not this API.

Envelope

JSON responses:

{ "ok": true, "data": { } }

or

{ "ok": false, "error": "human-readable message", "code": "machine_code" }

code and data are omitted when unused. SDKs unwrap data on success and raise AgentError on failure. Key off code and HTTP status, not the error string.

Exception: GET /api/v1/console/stream/{ticket} succeeds with 101 Switching Protocols and a raw telnet stream.

Bodies are JSON, max 32 MiB. Unknown fields on POST /api/v1/login are rejected. Project and console bodies ignore unknown fields.

Authentication

Route Auth
GET /api/v1/health none
POST /api/v1/login none (HTTPS required)
GET /browser/{token} one-time browser token
every other /api/v1/* Authorization: Bearer <token>

The Bearer token is an opaque agent session (not an EVE cookie). Idle timeout: 8 hours.

Next