Own Your AI (OYA) · API
Own Your AI (OYA) API, as shipped in the download
HTTP API
oya serve exposes 18 routes. Everything except /health and the static app is token-gated: the engine fails closed, so an unauthenticated request is refused rather than served.
| Route | Token | What it is for |
|---|---|---|
/admin | yes | Admin surface for the web app: config, connectors, skills. |
/admin/config | yes | — |
/admin/mcp | yes | — |
/admin/model | yes | Model wizard — hardware detection and recommendations. |
/admin/model/download | yes | Starts and reports a model download. |
/bridge | no | Bridge status. |
/bridge/start | no | Starts a configured bridge. |
/deliverable | yes | What the current session actually produced, as distinct from what it said. |
/deliverables | yes | The full list of deliverables. |
/health | no | Liveness. The only route deliberately open, so a supervisor can poll without a token. |
/ledger | yes | The egress ledger — every host this process contacted. |
/mcp | yes | The MCP endpoint: this machine's tools, exposed for another agent to call. |
/model/ | no | Proxies model requests from the browser, so the page never holds your endpoint credentials. |
/session | yes | Session history and management. |
/state | yes | Current engine state for the web app. |
/v1 | no | OpenAI-compatible surface. |
/v1/chat/completions | no | OpenAI-compatible chat completions, proxied to your local model. |
/v1/models | no | Models available from the configured endpoint. |
The token is written to ~/.oya/serve-token and stamped into the page the engine serves, so the browser app authenticates without you copying anything. See [Running the engine](../guides/engine.md).
_Generated from cli/oya.mjs._
← Back to Own Your AI (OYA) · Manual · Quickstart · Test run