Guide 10

Session API

Authenticated endpoints used by the CAKRA workspace.

Authentication

These same-origin endpoints use the signed-in browser session, not a public API key. Workspace requests require a verified identity and a CAKRA profile. Administrative requests additionally require the admin role.

Analysis requests

POST /api/ai accepts a question and a bounded session summary. Use Cici to prepare a supported request. This action does not upload raw logs. A local summary is available when assisted analysis cannot respond.

Self-profile check

POST /api/auth/check-email checks only the identity verified by the session. It does not accept an email to search other accounts. A verified identity without a profile receives registered: false.

JSON · Synthetic example

{
  "registered": true,
  "email": "your-verified-account@example.com"
}

Response status

401: sign in with a verified identity. 403: your role is not allowed. 429: wait before retrying. 503: the service or configuration is unavailable.