---
title: "The sandbox contract, directly crawlable."
description: "Read and download the crawlable Wildflower Computer OpenAPI 0.8.0 contract, SDK model, JSON schemas, package versions, and shared lifecycle fixtures."
canonical: "https://wildflower.computer/openapi/"
openapi_version: "0.8.0"
source_revision: "788b7325a454b8b753a7d614247d5694bad5c967"
---

# The sandbox contract, directly crawlable.

OpenAPI 0.8.0 describes the Wildflower Computer API v1 surface. The generated SDK model, package-version schema, and shared contract fixtures are exposed alongside it.

## Download the contracts

- [openapi.json](https://wildflower.computer/openapi.json) — OPENAPI — API paths, provider-specific create schemas, responses, and errors.
- [sdk-model.json](https://wildflower.computer/contracts/sdk-model.json) — GENERATOR INPUT — Language-neutral SDK naming and typed provider metadata.
- [sdk-model.schema.json](https://wildflower.computer/schemas/sdk-model.schema.json) — JSON SCHEMA — Validation schema for the SDK source model.
- [package-versions.json](https://wildflower.computer/contracts/package-versions.json) — VERSIONS — Independent generated package versions by language.
- [package-versions.schema.json](https://wildflower.computer/schemas/package-versions.schema.json) — JSON SCHEMA — Validation schema for generated package version declarations.
- [benchmark-result.schema.json](https://wildflower.computer/schemas/benchmark-result.schema.json) — JSON SCHEMA — Validation schema for local, contextualized SDK latency results.
- [live-benchmark-result.schema.json](https://wildflower.computer/schemas/live-benchmark-result.schema.json) — JSON SCHEMA — Validation schema for bounded live-provider SDK benchmark results.
- [provider-observability.schema.json](https://wildflower.computer/schemas/provider-observability.schema.json) — JSON SCHEMA — Provider-specific authentication, latency, usage, and cost gaps.
- [sandbox-operation-event-v2.schema.json](https://wildflower.computer/schemas/sandbox-operation-event-v2.schema.json) — JSON SCHEMA — Canonical operation timing, byte-count, outcome, and provenance event.
- [sandbox-cost-snapshot-v2.schema.json](https://wildflower.computer/schemas/sandbox-cost-snapshot-v2.schema.json) — JSON SCHEMA — Current cost snapshot with a UUID event ID and immutable pricing basis.
- [provider-benchmark-result-v1.schema.json](https://wildflower.computer/schemas/provider-benchmark-result-v1.schema.json) — JSON SCHEMA — Raw reproducible provider benchmark result contract.
- [contract-fixtures.json](https://wildflower.computer/contracts/contract-fixtures.json) — FIXTURES — Shared lifecycle requests, responses, and error expectations.
- [provider-billing-fixtures.json](https://wildflower.computer/contracts/provider-billing-fixtures.json) — FIXTURES — Provider-neutral normalization cases for scope, lag, currency, pagination, and conflicts.
- [observability-vocabulary.json](https://wildflower.computer/contracts/observability-vocabulary.json) — VOCABULARY — Canonical event names, schema versions, measurements, operations, fidelity levels, metrics, and alert naming.
- [source.json](https://wildflower.computer/contracts/source.json) — PROVENANCE — Exact source revision and SHA-256 for every mirrored contract file.

## Current API operations

This directory is rendered directly from the synchronized OpenAPI document; adding, removing, or renaming an operation changes this page automatically.

- **GET** `/healthz` — Check service health
- **GET** `/metrics` — Get identifier-free API delivery metrics
- **GET** `/openapi.json` — Get this OpenAPI document
- **POST** `/v1/auth/google/intent` — Start Google sign-in
- **POST** `/v1/auth/google` — Complete Google sign-in
- **POST** `/v1/auth/session/refresh` — Rotate the browser session
- **POST** `/v1/auth/logout` — Log out the browser session
- **GET** `/v1/me` — Get the authenticated browser user
- **DELETE** `/v1/me` — Delete the authenticated user
- **GET** `/v1/accounts` — List accessible accounts
- **POST** `/v1/accounts` — Create an organization
- **GET** `/v1/accounts/{accountId}` — Get an accessible account
- **PATCH** `/v1/accounts/{accountId}` — Update an account
- **DELETE** `/v1/accounts/{accountId}` — Delete an organization
- **GET** `/v1/accounts/{accountId}/members` — List account members
- **PATCH** `/v1/accounts/{accountId}/members/{userId}` — Change an account member role
- **DELETE** `/v1/accounts/{accountId}/members/{userId}` — Remove an account member
- **POST** `/v1/accounts/{accountId}/leave` — Leave an organization
- **GET** `/v1/accounts/{accountId}/projects` — List accessible projects in an account
- **POST** `/v1/accounts/{accountId}/projects` — Create a project in an account
- **GET** `/v1/accounts/{accountId}/invitations` — List pending organization invitations
- **POST** `/v1/accounts/{accountId}/invitations` — Invite a person to an organization
- **DELETE** `/v1/accounts/{accountId}/invitations/{invitationId}` — Revoke a pending organization invitation
- **POST** `/v1/accounts/{accountId}/invitations/{invitationId}/resend` — Rotate and resend a pending organization invitation
- **GET** `/v1/invitations` — List invitations matching the signed-in user's verified identities
- **POST** `/v1/invitations/{invitationId}/accept` — Accept an organization invitation
- **POST** `/v1/invitations/{invitationId}/decline` — Decline an organization invitation
- **GET** `/v1/projects` — List owned projects
- **POST** `/v1/projects/{projectId}/transfer` — Transfer a personal project to an organization
- **GET** `/v1/projects/{projectId}/members` — List effective project members
- **POST** `/v1/projects/{projectId}/members` — Add a project member
- **PATCH** `/v1/projects/{projectId}/members/{userId}` — Change a project member role
- **DELETE** `/v1/projects/{projectId}/members/{userId}` — Remove an explicit project member
- **GET** `/v1/projects/{projectId}/api-keys` — List project API keys
- **POST** `/v1/projects/{projectId}/api-keys` — Create a project API key
- **DELETE** `/v1/projects/{projectId}/api-keys/{keyId}` — Revoke a project API key
- **GET** `/v1/providers` — List provider capabilities
- **GET** `/v1/provider-observability` — Get provider observability coverage
- **GET** `/v1/provider-profiles` — List connected provider profiles
- **POST** `/v1/provider-profiles/{provider}` — Connect or replace a provider profile
- **DELETE** `/v1/provider-profiles/{provider}` — Disconnect a provider profile
- **POST** `/v1/provider-profiles/{provider}/test` — Test stored profile resolution
- **POST** `/v1/provider-profiles/{provider}/verify` — Deeply verify provider lifecycle permissions
- **GET** `/v1/sandboxes` — List project sandboxes
- **POST** `/v1/sandboxes` — Create a persistent running sandbox
- **GET** `/v1/sandboxes/{id}` — Get a sandbox
- **DELETE** `/v1/sandboxes/{id}` — Delete a sandbox
- **POST** `/v1/sandboxes/{id}/exec` — Run a command in an existing sandbox
- **POST** `/v1/sandboxes/{id}/files/read` — Read a file from an existing sandbox
- **POST** `/v1/sandboxes/{id}/files/write` — Write a file in an existing sandbox
- **GET** `/v1/sandboxes/{id}/usage` — Get transparent sandbox usage and cost fidelity
- **GET** `/v1/legal/current` — Get the current legal release
- **POST** `/v1/legal/acceptances` — Accept current legal documents
- **POST** `/v1/legal/notifications/{notificationId}/seen` — Mark a legal notice as seen
- **POST** `/v1/legal/consents` — Record or withdraw optional consent
- **GET** `/v1/accounts/{accountId}/legal` — Get organization agreement state
- **POST** `/v1/accounts/{accountId}/legal/agreements` — Accept the release for an organization
- **POST** `/v1/webhooks/resend` — Receive a Resend delivery event

## Generation provenance

The checked-in OpenAPI document and SDK model generate the TypeScript, Python, Rust, Go, Zig, and raw HTTP outputs. Each generated target records the API version, OpenAPI version, generator version, package version, and exact OpenAPI SHA-256.

## Human-readable context

- [Understand the normalized sandbox API](https://wildflower.computer/sandbox-api/)
- [Review tested provider compatibility](https://wildflower.computer/compatibility/)
- [Explore generated SDK targets](https://wildflower.computer/sdk/)
- [Read authentication and error concepts](https://wildflower.computer/docs/concepts/)
- [Browse browser-session control-plane operations](https://wildflower.computer/docs/reference/control-plane/)

> **SHA-256 7e4f085a…e81c4f** — Current provenance Wildflower source 788b7325.