All endpoints

This index covers every operation on Kato’s developer, CLI, Raycast, and OAuth integration surfaces: 49 canonical operations, plus four compatibility aliases. All paths below use https://api.getkato.io. Choose the surface before choosing an endpoint. Developer keys, Raycast OAuth tokens, and signed-in sessions have different access rules. Internal application routes, provider callbacks, and service-to-service endpoints are not supported developer integration contracts and are not included here. Examples throughout the reference use illustrative IDs and workspace data. Replace them with values returned by your workspace.

Developer API

Workspace-scoped developer keys. See authentication.

Method	Path	Reference	Required scopes
GET	`/v1/whoami`	Inspect your access key	Valid credential
GET	`/v1/objects`	List objects	`objects:read`
GET	`/v1/objects/{object}/fields`	List object fields	`objects:read`
GET	`/v1/records`	List records	`records:read`
POST	`/v1/records`	Create a record	`records:write`
GET	`/v1/records/{recordId}`	Get a record	`records:read`
PATCH	`/v1/records/{recordId}`	Update a record	`records:write`
PUT	`/v1/records/{recordId}`	Upsert a record	`records:write`
DELETE	`/v1/records/{recordId}`	Archive a record	`records:write`
POST	`/v1/records/{recordId}/restore`	Restore a record	`records:write`
POST	`/v1/records/{recordId}/comments`	Add a record comment	`comments:write`
GET	`/v1/tasks`	List tasks	`tasks:read`
POST	`/v1/tasks`	Create a task	`tasks:write`
GET	`/v1/tasks/{taskId}`	Get a task	`tasks:read`
PATCH	`/v1/tasks/{taskId}`	Update a task	`tasks:write`
DELETE	`/v1/tasks/{taskId}`	Archive a task	`tasks:write`
GET	`/v1/webhooks`	List webhook endpoints	`webhooks:read`
GET	`/v1/webhooks/events`	List supported webhook events	`webhooks:read`
POST	`/v1/webhooks`	Create a webhook endpoint	`webhooks:write`
DELETE	`/v1/webhooks/{endpointId}`	Delete a webhook endpoint	`webhooks:write`

CLI API

Developer keys; environment operations also require a current owner or admin role. See CLI conventions.

Method	Path	Reference	Required scopes
GET	`/cli/v1/whoami`	Inspect CLI credentials	Valid credential
GET	`/cli/v1/projects`	List CLI projects	Valid credential
GET	`/cli/v1/env/environments`	List project environments	`env:read`
GET	`/cli/v1/env/pull`	Pull environment variables	`env:read`
POST	`/cli/v1/env/push`	Push environment variables	`env:write`

Raycast API

OAuth access tokens issued to kato-raycast. Every listed scope is required. See Raycast conventions.

Method	Path	Reference	Required scopes
GET	`/v1/raycast/whoami`	Inspect Raycast identity	Valid credential
GET	`/v1/raycast/task-statuses`	List Raycast task statuses	`tasks:read`
GET	`/v1/raycast/task-options`	Get task creation options	`tasks:write`, `records:read`, `meetings:read`
GET	`/v1/raycast/tasks`	List my Raycast tasks	`tasks:read`
POST	`/v1/raycast/tasks`	Create a Raycast task	`tasks:write`
GET	`/v1/raycast/tasks/{taskId}`	Get Raycast task details	`tasks:read`
PATCH	`/v1/raycast/tasks/{taskId}`	Update a Raycast task	`tasks:write`
POST	`/v1/raycast/comments`	Add a comment	`comments:write`
GET	`/v1/raycast/entities/{entityType}/{entityId}/activity`	Get entity activity	`activity:read`
GET	`/v1/raycast/objects`	List Raycast objects	`objects:read`
GET	`/v1/raycast/objects/{objectSlug}/records`	Browse object records	`objects:read`, `records:read`
GET	`/v1/raycast/records/recent`	List recent records	`records:read`
GET	`/v1/raycast/notifications`	List notifications	`notifications:read`
POST	`/v1/raycast/notifications/{notificationId}/read`	Mark notification read	`notifications:write`
POST	`/v1/raycast/notifications/{notificationId}/unread`	Mark notification unread	`notifications:write`
POST	`/v1/raycast/notifications/read-all`	Mark all notifications read	`notifications:write`
DELETE	`/v1/raycast/notifications/{notificationId}`	Dismiss a read notification	`notifications:write`
GET	`/v1/raycast/brief`	Get the daily brief	`tasks:read`, `meetings:read`, `notifications:read`
GET	`/v1/raycast/meetings/upcoming`	List upcoming meetings	`meetings:read`
GET	`/v1/raycast/search`	Search the workspace	`tasks:read`, `records:read`, `meetings:read`

OAuth

Registered-client authorization and token lifecycle. See OAuth flow.

Method	Path	Reference	Required scopes
GET	`/oauth/clients/{clientId}`	Get OAuth client metadata	No bearer authentication
POST	`/oauth/authorize`	Authorize a workspace grant	Signed-in session
POST	`/oauth/token`	Exchange or refresh tokens	No bearer authentication
POST	`/oauth/revoke`	Revoke an OAuth grant	No bearer authentication

Compatibility aliases

Four older OAuth paths call the same handlers. They are listed alongside their canonical paths in OAuth compatibility paths. Use the canonical endpoint when implementing a new client.

API Reference

Developer identity

Objects and records

Tasks

Webhooks

CLI API

Raycast API

Raycast identity and discovery

Raycast tasks

Raycast records

Raycast meetings and activity

Raycast notifications

OAuth

All endpoints

Developer API

CLI API

Raycast API

OAuth

Compatibility aliases

​Developer API

​CLI API

​Raycast API

​OAuth

​Compatibility aliases

Developer API

CLI API

Raycast API

OAuth

Compatibility aliases