Mark an alert event acknowledged (org-scoped).

Create an alert rule for the caller's organization.

Delete an alert rule (org-scoped).

List the caller's organization's alert events (org-scoped, triggered_at desc).

Get a single alert rule by id (org-scoped; 404 cross-org).

List the caller's organization's alert rules (org-scoped).

Test-evaluate an alert rule against an item without persisting.

Update an alert rule (org-scoped).

Run a registered analytics operation (zonal_stats / time_series / change_detection).

Detailed info about a single spectral index (+ compatible sensors).

List spectral indices (optionally filtered by category / sensor compatibility).

Detailed capabilities of a single analytics operation.

List all registered analytics operations + their input schemas (discovery).

List supported sensors and their band mappings.

Validate a band-math formula (syntax + required bands) without executing it.

Mint an organization API key (the secret is returned once).

List an organization's API keys (metadata only — never the secret).

Revoke an organization API key.

Delete an asset (file) from an item (item access required).

Create a custom band-math formula for the caller's organization (write scope).

Delete a custom band-math formula (write scope; templates are protected).

Get a single custom band-math formula by id (org-scoped; cross-org → 404).

List the caller-org's custom band-math formulas (optional category/template filters).

Update a custom band-math formula (write scope; org-scoped).

Approve a credit purchase and charge the saved card (human approver only).

Get one credit-purchase approval (org-scoped).

List the org's credit-purchase approvals (optionally by status).

Reject a pending credit-purchase approval.

Request approval for a large credit purchase.

Read the org's auto-topup settings (enabled=false if unset).

The org's current credit balance.

The org's credit ledger (paged, optionally filtered by reason).

List organizations pending deletion (system admin).

Unresolved tracking-failure DLQ counts, grouped by storage_type + source.

The org's unbilled enterprise post-pay liability (to put on a Xero invoice).

Orgs awaiting free-tier approval (the operator review queue).

The org's enterprise invoices (grouped from settled orders).

List all available plans with their quota/feature limits (public catalog).

Compute storage-billing drift for one org (no run recorded).

Audit trail of all drift corrections applied (compliance + support).

List reconciliation runs (newest first; filter by org / flagged).

Configure automatic top-up (requires a default card when enabling).

An org's billing status + current usage (org membership required).

List the org's Stripe invoices (never 500s — empty on a Stripe hiccup).

Off-session card charge → credits. Idempotency is at the STRIPE level: the client's Idempotency-Key is threaded into charge_for_credits (Stripe dedups the charge, the PaymentIntent id dedups the grant), matching the legacy /billing/topup exactly. On 3DS/SCA the op raises a 402 carrying the PaymentIntent client_secret, which we surface at the TOP LEVEL of the problem body — problem.client_secret — because that's what the topup page reads to drive confirmCardPayment.

Search every data source covering the AOI in one query (merged, type-tagged).

Extract a 3D point cloud (lon/lat/elev/attribute) from a GEDI or ICESat-2 granule.

Resolve + 307-redirect to a scene's quicklook (external host).

Resolve + 307-redirect to a scene's thumbnail (external host).

Landsat scene metadata (parsed id fields + available visualizations).

NAIP item metadata from the Element84 STAC.

Sample scene metadata (sensor + on-disk STAC + bands + thumbnail).

Sentinel-2 scene metadata (parsed id + live COG info + available visualizations).

List sample scenes for a provider (paged).

List on-disk sample-data providers (+ registered sensors).

Search a commercial-imagery host's catalog (STAC, price-enriched).

List every searchable data source + its collections (the dataset registry).

List catalog vendors + host⇄pricing-vendor identifiers.

List available Landsat visualizations.

List available NAIP visualizations.

Capture-date metadata for a clip area.

List mosaic types for a clip area.

List delivery-bucket clip areas.

Create + dispatch a cog_clip job from an item — a money path (reserves CU), so it carries Idempotency-Key parity: a retry replays the first response (one job reserved + dispatched, never a duplicate).

List downloadable clip files for a job.

Get a single clip job by id.

List clip jobs for an organization.

Tile rendering params for a completed clip job.

Curated colormap groups for the frontend picker (bare-dict).

Predefined spectral-index formula templates (bare-dict, keyed by index id).

AOI-scoped percentile statistics for a COG — drives per-AOI colormap rescale.

Create an organizing collection within a project (editor/admin required).

Soft-delete a collection, unlinking its items (project admin required).

Get a collection by id within a project. Project member access + belongs-to-project guard.

List a project's collections (with item counts). Project member access.

Update a collection's metadata (editor/admin required).

Get a single EULA document enriched with the caller's org acceptance.

List an EULA's documents (paged), each enriched with the caller's org acceptance.

Get a single EULA enriched with the caller's org acceptance.

List EULAs (paged), each enriched with the caller's org acceptance.

Create a webhook subscription for the caller's organization.

Delete a webhook subscription (org-scoped).

Get a single webhook subscription (org-scoped; secret redacted).

List the caller's organization's webhook subscriptions (secret redacted).

Send a test event to a webhook subscription and return the delivery result.

Update a webhook subscription (org-scoped).

Get a single catalog collection by name.

List catalog collections (provider-compatible, paged).

Get a single catalog data product by name.

List catalog data products (provider-compatible, paged).

Get a single catalog provider by name.

List catalog providers (PRODUCER/HOST, paged).

Create an item within a project (editor/admin on the project).

Soft-delete an item (admin/editor on the item's project required).

Auto-detect band names for an asset from its reflectance statistics.

Duplicate an item with its assets + viz profiles (admin/editor on the project).

Fetch a single catalog item by id.

Get an item as a full STAC 1.0.0 Feature with embedded assets + links. Item member access.

Get the lineage tree (parents + children) for an item. Item member access.

List a project's items (optionally filtered by collection). Project member access.

List all assets (files) attached to an item. Item member access.

List items in a collection (access via the collection's project). Project member access.

List items approaching retention expiry (system-wide, for the notification cron).

Search a project's items with STAC-compatible filters (project member access).

Search all items across the caller's organization (STAC-compatible).

Rename the bands on an item's asset (project member access).

Global expression statistics (p2/p98 rescale) from the smallest COG overview.

TileJSON metadata for one of our catalog items.

Update an item's mutable metadata (editor/admin on its project).

Dismiss one of the caller's notifications (hide it from the list).

List the caller's notifications, newest first (user-scoped inbox).

Mark all of the caller's unread notifications as read.

Mark one of the caller's notifications as read.

Count the caller's unread, undismissed notifications (lightweight poll).

Preview the server-authoritative AOI price for a cart of archive captures.

Place an archive order — a money path, so it carries Idempotency-Key parity with the legacy /v2/orders/archive route it replaces. A repeat with the same key replays the first response (one order, one credit reservation).

Returns 202 Accepted (the order lands in awaiting_data), matching the legacy wire contract exactly so the cutover is invisible to every client.

Declared BEFORE the generic /op/{operation_id} route so FastAPI matches this static path first; everything else still flows through the generic dispatch.

Cancel an order (policy-gated), refunding/voiding its reservation.

Covered-vs-remainder coverage for a fulfilled/fulfilling tasking order.

Per-AOI delivered-vs-requested coverage for a tasking order (any status).

Price-preview an order without committing (provider-compatible).

Get a single order (org-scoped).

Get the dynamic order-form schema for a data product (reference).

List the org's orders (filtered, paged, provider-compatible).

List the items + assets delivered for an order (STAC FeatureCollection).

Place order(s) from a FeatureCollection (archive reserves; tasking queues feasibility).

Unified inbox of the org's pending tasking decisions (feasibility + quotation).

Preview the server-authoritative price for an AOI-priced tasking request.

Predict whether a tasking order needs a feasibility study (per-feature).

List the org's feasibility studies (+ their options, paged).

List an order's tasking groups (admin).

Predicted satellite passes for a tasking AOI (manual-feasibility: empty).

Place a tasking order — a commercial-order money path, so it carries Idempotency-Key parity (one order per key) with the legacy /v2/orders/tasking route it replaces. 202 Accepted matches the legacy wire contract exactly.

Declared BEFORE the generic /op/{operation_id} route so FastAPI matches this static path first.

List the org's tasking quotations (paged).

List the tasking sensor catalog (ids, resolution, bands, pricing inputs).

Soft-delete a tasking template (org-scoped).

List the caller organization's active tasking templates.

Save a reusable tasking acquisition template for the caller's organization.

Patch an order's tags (metadata only; provider merge-patch).

List the org's minimum commitments with server-computed burn-down + take-or-pay.

Monthly enterprise statement: all activity (commitment lines flagged) + burn-down + settlement reconciliation.

Create an organization and enroll the caller as its owner (self-serve onboarding).

Persist a saved card (Airwallex Payment Consent) for the org.

Start saving a card to the org (off-session) — returns the Airwallex client_secret + env.

Detach (remove) a saved payment method from the org.

List the org's saved payment methods.

Make a saved payment method the org's default (used by off-session charges).

Estimate the cost of running a process with the given inputs.

Get one process description (public).

List available processes (OGC process catalog, public).

Validate process inputs (provider returns empty body on success).

Create a processing job (no dispatch) — a money path (reserves credits), so it carries Idempotency-Key parity: a retry with the same key replays the first response (one job created + reserved, never a duplicate). 201 matches the legacy POST /processing-jobs wire contract.

Create + dispatch a processing job — a money path (reserves credits), so it carries Idempotency-Key parity: a retry with the same key replays the first response (one job created + reserved + dispatched, never a duplicate).

Dispatch an existing pending processing job to its registered worker.

Execute a process (reserve credits + dispatch a job).

Get a processing job by id (provider facade, org-scoped).

List the org's processing jobs (provider facade, org-scoped).

Tile rendering info for any completed processing job (clip/bathy outputs).

List available processing job types (optionally by category).

Get a processing job by id (org match + project access).

List a project's processing jobs (project member access).

Add a member to a workspace (project admin/owner).

Archive a workspace, hiding it from the default list (project admin/owner).

Create a workspace in the caller's organization.

Permanently delete a workspace and all its data (project admin/owner).

Remove a member from a workspace (project admin/owner).

Update a workspace's metadata (project admin/owner).

Change a member's role in a workspace (project admin/owner).

Walk the provenance/lineage graph for an entity (how it was produced / what derived from it).

Create a password-protected share link for an item or collection.

Revoke a share link (editor/admin on the shared target's project).

Validate a share link (token + password) and return the shared target.

TileJSON for a publicly-shared item (token + password).

List STAC Collections owned by the caller's organization (provider-compatible).

Cross-collection STAC search (CQL2-JSON / bbox / intersects), org-scoped.

Complete an upload, then schedule the post-upload pipeline AFTER the response (metadata extraction / viz profiles / auto-collections) — same deferral the legacy route did via BackgroundTasks. The op creates the item/asset records + provenance synchronously; the pipeline is best-effort post-processing.

Mark an upload session failed, releasing its storage reservation.

Start an upload session, reserving storage quota (editor/admin on the project).

Update an upload session's progress.

Mint a signed URL for uploading a file into an upload session.

Usage stats for the current billing period (storage, tiles, credits, jobs).

Historical usage (tile requests + peak storage) for the past N months.

The visualizations available for an item — RGB/index/elevation — backend-owned + resolved.

Create a visualization profile for an item (editor/admin).

Delete a visualization profile (editor/admin).

Get a single visualization profile for an item. Item member access.

Set a profile as the item's default (editor/admin).

List all visualization profiles for an item (ordered by sort_order, created_at). Item member access.

Update a visualization profile (editor/admin).