REST API

Everything the dashboard, CLI and MCP server do goes through this API. Base URL: https://api.healkite.com (or your own server).

Authentication

curl https://api.healkite.com/v1/apps -H "authorization: Bearer hk_…"

Create access keys under API & MCP. Each key has a role (Team & roles); a request outside it returns 403.

`GET /v1/apps`, `POST /v1/apps`, `PATCH /v1/apps/:appId`	Apps
`GET /v1/apps/:appId/channels`, `POST /v1/apps/:appId/channels`	Channels
`POST /v1/uploads`, `PUT /v1/uploads/:sha256`	Upload bundles and patches
`POST /v1/releases`	Publish (rollout, guard, schedule, devices, experiment, push)
`PATCH /v1/releases/:id`	Rollout, mandatory, enabled, schedule
`POST /v1/releases/:id/promote`	Copy to another channel
`POST /v1/releases/:id/send`	Send to specific devices
`POST /v1/releases/:id/push`	Silent push
`GET, POST /v1/releases/:id/guard[/:action]`	Guard status, `pause`, `resume`
`GET, POST /v1/releases/:id/experiment[/conclude]`	Experiments
`GET /v1/channels/:key/releases`	Release list
`GET /v1/channels/:key/overview`, `/stats`, `/adoption`	Health and adoption
`GET /v1/channels/:key/devices[/:deviceId/timeline]`	Devices
`POST /v1/channels/:key/rollback`	Roll back
`PUT, DELETE /v1/channels/:key/kill-switch`	Maintenance mode
`GET, POST, DELETE /v1/keys`	Access keys
`GET, POST, PATCH, DELETE /v1/members`	Team
`GET /v1/usage`, `GET /v1/plans`, `GET /v1/billing`	Usage and plan

Errors are JSON: { "error": "not_found", "message": "…" }.

Devices only read signed manifests from the CDN and send one telemetry batch per launch to POST /v1/ingest. They never need an access key.