Skip to main content
POST
Search executable and requestable tools

Authorizations

Authorization
string
header
required

Tenant secret key (lcr_…). Server-side only.

Headers

X-Locus-Session-Id
string

Required only when the end-user JWT carries sid. Send the original high-entropy session value; sid is its SHA-256 fingerprint. Ignored for secret-key authentication.

Required string length: 16 - 128
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:-]{15,127}$
X-Locus-End-User
string

Optional end-user identity for a tenant secret key. Case-sensitive immutable ID in the tenant namespace. Prefer an identity-provider subject, not an email address.

Required string length: 1 - 200
Pattern: ^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,199}$

Body

application/json
query
string

Trimmed natural-language capability, provider, or tool query. Optional with category or pack.

Required string length: 1 - 256
category
string

Live canonical category ID or unambiguous alias.

Required string length: 1 - 120
pack
string

Live curated-pack ID or unambiguous alias.

Required string length: 1 - 120
limit
integer
default:10
Required range: 1 <= x <= 50
cursor
string
Required string length: 1 - 500
include_facets
boolean
default:false

Response

Ranked compact tool summaries

success
any
required
query
string
required
taxonomy_revision
string
required
count
integer
required
Required range: 0 <= x <= 50
results
object[]
required
Maximum array length: 50
appliedFilters
object
next_cursor
string
facets
object[]
Maximum array length: 50
note
string

Present when no enabled tool matched.