Skip to main content
POST
Search enabled executable tools

Authorizations

Authorization
string
header
required

Tenant secret key (lcr_…). Server-side only.

Headers

X-Locus-Session-Id
string

Required only when the end-user JWT carries sid. Send the original high-entropy session value; sid is its SHA-256 fingerprint. Ignored for secret-key authentication.

Required string length: 16 - 128
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:-]{15,127}$
X-Locus-End-User
string

Optional end-user identity for a tenant secret key. Case-sensitive immutable ID in the tenant namespace. Prefer an identity-provider subject, not an email address.

Required string length: 1 - 200
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,199}$

Body

application/json
query
string
required

Trimmed natural-language capability, provider, or tool query.

Required string length: 1 - 256
limit
integer
default:10
Required range: 1 <= x <= 20

Response

Ranked enabled tool contracts

success
any
required
query
string
required
count
integer
required
Required range: 0 <= x <= 20
results
object[]
required
Maximum array length: 20
note
string

Present when no enabled tool matched.