> ## Documentation Index > Fetch the complete documentation index at: https://docs.parmanasystems.com/llms.txt > Use this file to discover all available pages before exploring further. # Reference: every endpoint > Every operation of the Parmana REST API, grouped as in the API reference, generated from the OpenAPI file. Every operation the server exposes, 48 in all, read from `openapi/openapi.bundled.yaml`. Tests keep that file equal to the routes the server actually mounts (`openapi-route-parity.test.ts`). Each row links to the operation's page, with its schemas and real captured responses. ## Execution | Method | Path | What it does | | - | - | - | | `POST` | [`/execute`](/api-reference/endpoints/execute-transaction) | Runs the complete pipeline synchronously and returns the finished Execution Trust Record. | ## Transactions | Method | Path | What it does | | - | - | - | | `GET` | [`/transactions`](/api-reference/endpoints/list-transactions) | Returns every accepted Business Transaction. | | `POST` | [`/transactions`](/api-reference/endpoints/create-transaction) | Identical to `POST /execute` in every way except the success status: this endpoint returns `201` where `POST /execute` returns `200`. | | `GET` | [`/transactions/{businessTransactionId}`](/api-reference/endpoints/get-transaction) | Returns a bare Business Transaction by ID. | ## Verification | Method | Path | What it does | | - | - | - | | `POST` | [`/verify`](/api-reference/endpoints/verify-transaction) | Deterministically re-validates the complete Execution Trust Record for businessTransactionId: recomputed hash vs. | | `GET` | [`/verification/{businessTransactionId}`](/api-reference/endpoints/get-latest-verification) | Returns the most recent Verification for the Execution Trust Record identified by businessTransactionId. | ## Receipts | Method | Path | What it does | | - | - | - | | `POST` | [`/receipt`](/api-reference/endpoints/generate-receipt) | Generates a cryptographically signed Receipt for businessTransactionId. | | `GET` | [`/receipt/latest/{businessTransactionId}`](/api-reference/endpoints/get-latest-receipt) | Returns the most recent Receipt for the Execution Trust Record identified by businessTransactionId. | ## Trust Records | Method | Path | What it does | | - | - | - | | `GET` | [`/trust-records`](/api-reference/endpoints/list-trust-records) | Returns the full, signed Execution Trust Record (transaction, executions, verifications, receipts, authorization) for every transaction on the requested page -- the periodic full-export capability for external audit/compliance review, di... | | `GET` | [`/trust-records/{businessTransactionId}`](/api-reference/endpoints/get-trust-record) | Returns the complete Execution Trust Record for businessTransactionId (looked up by Business Transaction ID, despite the path segment name; there is no separate trustRecordId lookup). | ## Replay | Method | Path | What it does | | - | - | - | | `POST` | [`/replay`](/api-reference/endpoints/replay-transaction) | Re-verifies the stored signature on the Execution Trust Record for businessTransactionId and returns its hash alongside the verification result. | ## Policies | Method | Path | What it does | | - | - | - | | `GET` | [`/policies/in-effect`](/api-reference/endpoints/get-policy-in-effect) | Returns the policy bound to a capability and the version a request for it must declare right now. | | `POST` | [`/policies/validate`](/api-reference/endpoints/validate-policy) | Checks that policies/{policyId}/{policyVersion}/policy.json exists and parses. | ## Policy Governance | Method | Path | What it does | | - | - | - | | `POST` | [`/policies/{name}/{version}/pending-changes`](/api-reference/endpoints/propose-policy-change) | Proposes a change to a policy's content (Policy Governance, maker-checker). | | `GET` | [`/policies/pending-changes`](/api-reference/endpoints/list-pending-policy-changes) | Lists Pending Policy Changes, each alongside a diff view: current (the live content at (policyName, policyVersion) today, or null if that version has never been published) and proposed (the change's own proposedContent). | | `POST` | [`/policies/pending-changes/{id}/approve`](/api-reference/endpoints/approve-policy-change) | Approves a Pending Policy Change (checker). | | `POST` | [`/policies/pending-changes/{id}/reject`](/api-reference/endpoints/reject-policy-change) | Rejects a Pending Policy Change (checker). | ## Approvers | Method | Path | What it does | | - | - | - | | `GET` | [`/approval-issuers`](/api-reference/endpoints/list-approval-issuers) | Every approver key the server trusts, or trusted, to sign approvals for policies that declare approvalSignals. | | `GET` | [`/approval-issuers/changes`](/api-reference/endpoints/list-approval-issuer-changes) | Approver changes, newest first, optionally filtered by status. | | `POST` | [`/approval-issuers/changes`](/api-reference/endpoints/propose-approval-issuer-change) | Proposes adding an approver key (action add, with the approver Ed25519 public key) or revoking a key added this way (action revoke). | | `POST` | [`/approval-issuers/changes/{id}/approve`](/api-reference/endpoints/approve-approval-issuer-change) | Approves an approver change and applies it in one step: add trusts the key from the next approval checked, revoke refuses every approval the key ever signed from the next request on. | | `POST` | [`/approval-issuers/changes/{id}/reject`](/api-reference/endpoints/reject-approval-issuer-change) | Rejects an approver change. | ## External Connectors | Method | Path | What it does | | - | - | - | | `GET` | [`/external-connectors`](/api-reference/endpoints/list-external-connectors) | Every external connector registration (ADR-0013), active and revoked: the capability, the HTTPS endpoint Parmana releases it to, the policy that governs it, and the parameters Parmana forwards. | | `GET` | [`/external-connectors/changes`](/api-reference/endpoints/list-external-connector-changes) | External connector changes, newest first, optionally filtered by status. | | `POST` | [`/external-connectors/changes`](/api-reference/endpoints/propose-external-connector-change) | Proposes registering an external connector (action register: a capability, the HTTPS endpoint to release it to, the policy that governs it, the parameters to forward, and optionally a timeout) or revoking the active one for a capability ... | | `POST` | [`/external-connectors/changes/{id}/approve`](/api-reference/endpoints/approve-external-connector-change) | Approves an external connector change and applies it in one step: register makes the registration active, revoke ends it. | | `POST` | [`/external-connectors/changes/{id}/reject`](/api-reference/endpoints/reject-external-connector-change) | Rejects an external connector change. | ## Refusal Records | Method | Path | What it does | | - | - | - | | `POST` | [`/refusal/verify`](/api-reference/endpoints/verify-refusal-record) | Verifies a Refusal Record's signature (RFC-0021). | | `GET` | [`/refusal/{businessTransactionId}`](/api-reference/endpoints/get-refusal-record) | Looks up a Refusal Record by businessTransactionId from Parmana's own storage. | ## Execution Intents | Method | Path | What it does | | - | - | - | | `POST` | [`/execution-intents/verify`](/api-reference/endpoints/verify-execution-intent) | Verifies an Execution Intent's hash and signature (ADR-0012). | | `GET` | [`/execution-intents/unfinalized`](/api-reference/endpoints/list-unfinalized-execution-intents) | Lists Execution Intents that never reached a signed Execution Trust Record and were not closed by hand, oldest first (ADR-0012). | | `GET` | [`/execution-intents/{businessTransactionId}`](/api-reference/endpoints/get-execution-intent) | Returns the signed Execution Intent for a businessTransactionId and its operational status (ADR-0012). | | `POST` | [`/execution-intents/{businessTransactionId}/finalize`](/api-reference/endpoints/finalize-execution-intent) | Rebuilds the signed Execution Trust Record for an action that was released but whose record was never produced (ADR-0012). | | `POST` | [`/execution-intents/{businessTransactionId}/resolve`](/api-reference/endpoints/resolve-execution-intent) | Closes an Execution Intent in state `PREPARED` or `ERRORED` after a verified human reconciled it at the connector (G-54). | ## Audit | Method | Path | What it does | | - | - | - | | `POST` | [`/audit/verify`](/api-reference/endpoints/verify-audit-event) | Verifies a signed caller-authentication audit event's signature, the same unauthenticated, third-party-verifiable capability as POST /refusal/verify, over the durable caller\_audit\_events audit trail instead of Refusal Records. | ## System | Method | Path | What it does | | - | - | - | | `GET` | [`/`](/api-reference/endpoints/get-root) | Minimal liveness response. | | `GET` | [`/health`](/api-reference/endpoints/get-health) | Returns the operational health of the Parmana service. | | `GET` | [`/ready`](/api-reference/endpoints/get-ready) | Readiness probe, distinct from GET /health's pure liveness check: when storage is Supabase-backed, this one actually queries Postgres (SELECT 1, no table rows transferred) so an orchestrator can tell a process that is up but backed by de... | | `GET` | [`/openapi.yaml`](/api-reference/endpoints/get-open-api-spec) | Serves the bundled, self-contained OpenAPI document (openapi/openapi.bundled.yaml, produced by `npm run bundle:openapi` from openapi/openapi.yaml + schemas/\*.json) as a static file, see packages/api/src/routes/openapi.ts. | | `GET` | [`/openapi.json`](/api-reference/endpoints/get-open-api-spec-json) | The same bundled spec as GET /openapi.yaml, JSON-serialized instead of YAML, see packages/api/src/routes/openapi-json.ts. | | `GET` | [`/api-manifest.json`](/api-reference/endpoints/get-api-manifest) | A single machine-readable index for coding agents and tooling: the OpenAPI spec locations, the rendered documentation views, the authentication scheme, and both official SDKs (TypeScript and Python) with their real, current package name,... | | `GET` | [`/version`](/api-reference/endpoints/get-version) | Returns hardcoded deployment identifiers. | | `GET` | [`/keys/{keyId}`](/api-reference/endpoints/get-key) | Deliberately unauthenticated, like GET /audit/verify and GET /refusal/verify. | | `GET` | [`/.well-known/jwks.json`](/api-reference/endpoints/get-jwks) | Same unauthenticated, third-party-verification purpose as GET /keys/{keyId}, this is the enumeration form. | | `GET` | [`/callers/me`](/api-reference/endpoints/get-caller-me) | The proof artifact a security review asks for: "show me this agent's identity and exactly what it's authorized to do." Read-only, self-lookup only, an authenticated caller sees its own record, never another caller's, and this never retur... | ## Handbook | Method | Path | What it does | | - | - | - | | `GET` | [`/parmana-handbook.pdf`](/api-reference/endpoints/get-handbook-pdf) | Serves the handbook PDF (docs/site/parmana-handbook.pdf, generated by scripts/generate-handbook-pdf.ts from docs/site/handbook/\*.mdx) as a static file directly from this API, see packages/api/src/routes/handbook-pdf.ts. | | `GET` | [`/handbook/download-leads`](/api-reference/endpoints/get-handbook-download-lead) | Backs the plain-HTML-form download at docs/site/handbook/download.mdx -- a GET so a `
` with no client-side JavaScript can submit it directly, since the docs site host may sandbox or strip inline `