Control plane OpenAPI

The OpenCloud control plane specification is the canonical OpenAPI 3.1 contract for creating, building, deploying, verifying, and operating apps.

The contract is generated from the same typed operation registry used by:

• the standalone OpenCloud CLI; and
• the control-plane request and response validators.

The CLI uses the same operation IDs, paths, scopes, idempotency rules, and server-side validation as the control plane.

Security boundary

The CLI may read a secret from its local environment for backwards compatibility, but generated and browser-entry secrets are preferred. It uploads local source into the server-side draft model before invoking the authoritative validator and deployer. Legacy owner-only lifecycle endpoints remain available to operators and older CLI releases.

Stable URLs

https://docs.opencloud.ai/control-plane-openapi.yaml
https://api.opencloud.ai

The app runtime OpenAPI is separate because it describes APIs available inside a deployed application.