---
title: "Openapi Spec Route"
method: GET
path: "/openapi.json"
---

# Openapi Spec Route

`GET /openapi.json`

## Request

- Base URL: `https://astranl.com`
- URL: `https://astranl.com/openapi.json`
- Auth: none declared

2026-07-28 (s14.4 API tiering): the full spec advertised ALL 880 paths
including 76 internal + 49 money endpoints - an attack map. Now the
public spec hides internal/admin/money tiers; holders of X-Agent-Key or
X-Admin-Token still get the complete spec. Nothing is deleted, and the
endpoints keep their own auth gates - this only stops advertising them.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/astranl/apis/astranl-public-api-positive-allowlist.md) · [All operations](https://skmtc.dev/astranl/apis/astranl-public-api-positive-allowlist/llms.txt) · [OpenAPI document](https://skmtc.dev/astranl/apis/astranl-public-api-positive-allowlist/revisions/5f86bcffe30d?raw)