Route policy contract
Always allowed:/v2/core/health/v2/core/auth/*
POST /v2/core/searchrequiresMUBIT_CORE_ENABLE_DIRECT_SEARCH
/v2/core/* routes are denied by default middleware.
Core route reference
These routes are available at/v2/core/*. Routes beyond auth and health require appropriate policy flags or internal access.
Data operations
| Route | Method | Purpose |
|---|---|---|
/v2/core/insert | POST | Insert a single node |
/v2/core/batch_insert | POST | Batch insert multiple nodes |
/v2/core/node/:id | GET | Retrieve a node by ID |
/v2/core/node/:id | DELETE | Delete a node by ID |
/v2/core/runs/:run_id | DELETE | Delete all nodes in a run |
/v2/core/search | POST | Semantic vector search (policy-gated) |
Agent scratchpad memory
Per-session key-value scratchpad for agent working memory.| Route | Method | Purpose |
|---|---|---|
/v2/core/memory/:session_id | POST | Write to session scratchpad |
/v2/core/memory/:session_id | GET | Read session scratchpad |
/v2/core/memory/:session_id | DELETE | Clear session scratchpad |
SDM (Sparse Distributed Memory) operations
| Route | Method | Purpose |
|---|---|---|
/v2/core/sdm/write | POST | Write to SDM address space |
/v2/core/sdm/read | POST | Read from SDM address space |
Session management
Transactional sessions for atomic multi-operation commits.| Route | Method | Purpose |
|---|---|---|
/v2/core/session/create | POST | Create a new session |
/v2/core/session/:id/commit | POST | Commit session changes |
/v2/core/session/:id/drop | DELETE | Drop session without committing |
/v2/core/session/:id/snapshot | POST | Snapshot current session state |
/v2/core/session/load | POST | Load a previously snapshotted session |
Storage maintenance
| Route | Method | Purpose |
|---|---|---|
/v2/core/storage/stats | GET | RocksDB storage statistics (size, keys, compaction) |
/v2/core/storage/compact | POST | Trigger manual compaction |
ACL (Access Control)
| Route | Method | Purpose |
|---|---|---|
/v2/core/acl/grant | POST | Grant permission to a user/agent |
/v2/core/acl/revoke | POST | Revoke a permission |
/v2/core/acl/check | POST | Check if a permission is granted |
PubSub
| Route | Method | Purpose |
|---|---|---|
/v2/core/pubsub/subscribe | POST | Subscribe to a topic |
/v2/core/pubsub/unsubscribe | POST | Unsubscribe from a topic |
/v2/core/pubsub/list | POST | List active subscriptions |
Control parity rule
The same policy gates apply whencontrol.query runs in direct bypass mode.
Rollout guidance
- Start with both direct lane flags disabled.
- Enable one lane at a time outside production.
- Monitor lane-specific request/error metrics.
- Keep routed mode fallback active.
Failure modes and troubleshooting
| Symptom | Root cause | Fix |
|---|---|---|
| Direct lane request denied | Required flag disabled | Use routed retrieval or enable lane explicitly |
| Increased production error rate | Lane enabled without guardrails | Roll back lane and re-enable with staged traffic |
| Unclear fallback behavior | No route policy decision tree | Define mode fallback rules per feature |
Next steps
- Review integration guardrails at Data guardrails.
- Review retrieval implementation choices at Retrieve data.