qwen-code/docs/developers/daemon-rest-api-reference.md

Daemon REST API Reference

This is the public REST/SSE interface for integrations that run qwen serve --no-web and provide their own UI. Start with the integration guide, then use this page for endpoint discovery and the HTTP protocol reference for detailed lifecycle semantics.

OpenAPI

The curated 25-operation contract is available as OpenAPI 3.1 JSON. Import that URL into an OpenAPI-compatible renderer, client generator, or validation tool. The checked-in JSON is the portable interface contract for the operations indexed below and is validated against the guide, protocol headings, and registered routes in CI.

This index covers a curated core subset of the daemon's REST surface, not all of it. Outside it are the first-party Web Shell routes, conditional internal surfaces, and other public but non-core routes: file mutation, workspace registration, session organization and generation, and workspace MCP, skills, and providers among them. Those surfaces are advertised by their own capability tags; the HTTP protocol reference documents the session, workspace-status, and file surfaces, and MCP server management, auth providers, and device-flow sign-in are covered by the daemon auth and security notes. They are outside this contract, not deprecated.

Reading the index

• Capability is the feature tag to check in GET /capabilities. An em dash means the operation has no dedicated feature tag; clients that need to support older daemon builds should handle 404.
• Scope says which runtime owns the operation. process-global reads daemon-wide state, selected-runtime uses the request's workspace selection, persisted-workspace resolves persisted session storage, live-session-owner routes by the live session, and legacy-primary always targets the daemon's primary workspace. GET /session/:id/export is primary-pinned: it resolves only managed internal runtimes before falling back to the primary workspace.
• All operations in this index are stable in the v1 REST contract. The deprecated unstable_session_resume capability name is only an alias; use session_resume for the stable resume route.

Creation with startupConfig: { modelServiceId, reasoningEffort? } additionally requires session_startup_config. Only the model is required; omission of reasoning does not set a default. Successful preparation returns modelApplied: true and startupConfigApplied; malformed input returns 400 invalid_startup_config, while rejected selection returns 422 startup_config_rejected. See the startup negotiation contract for ordinary and standalone behavior.

Discovery

Operation	Capability	Scope	TypeScript SDK
GET /health	health	process-global	DaemonClient.health
GET /capabilities	capabilities	process-global	DaemonClient.capabilities

Session lifecycle

Operation	Capability	Scope	TypeScript SDK
POST /session	session_create	selected-runtime	DaemonClient.createOrAttachSession
POST /session/:id/load	session_load	selected-runtime	DaemonClient.loadSession
POST /session/:id/resume	session_resume	selected-runtime	DaemonClient.resumeSession
POST /session/:id/heartbeat	client_heartbeat	live-session-owner	DaemonClient.heartbeat
PATCH /session/:id/metadata	session_metadata	live-session-owner	DaemonClient.updateSessionMetadata
POST /session/:id/model	session_set_model	live-session-owner	DaemonClient.setSessionModel
DELETE /session/:id	session_close	live-session-owner	DaemonClient.closeSession

Prompts and events

Operation	Capability	Scope	TypeScript SDK
GET /session/:id/status	session_status	live-session-owner	DaemonClient.sessionStatus
POST /session/:id/prompt	session_prompt	live-session-owner	DaemonClient.promptNonBlocking
POST /session/:id/cancel	session_cancel	live-session-owner	DaemonClient.cancel
GET /session/:id/events	session_events	live-session-owner	DaemonClient.subscribeEvents
GET /session/:id/transcript	session_transcript	persisted-workspace	DaemonClient.getSessionTranscriptPage
GET /session/:id/context	session_context	live-session-owner	DaemonClient.sessionContext
GET /session/:id/export	session_export	legacy-primary	DaemonClient.exportSession
GET /session/:id/pending-prompts	—	live-session-owner	DaemonClient.getPendingPrompts

POST /session/:id/prompt returns 202 when the prompt enters the queue, not when the Agent finishes. Subscribe first, then correlate turn_complete or turn_error by promptId.

Permissions

Operation	Capability	Scope	TypeScript SDK
POST /session/:id/permission/:requestId	session_permission_vote	live-session-owner	DaemonClient.respondToSessionPermission
POST /permission/:requestId	permission_vote	legacy-primary	DaemonClient.respondToPermission

New multi-workspace integrations should always use the session-scoped route. The legacy route can return the same 404 for a request owned by another runtime as it does for an already-resolved vote.

Read-only workspace context

Operation	Capability	Scope	TypeScript SDK
GET /workspace/tools	—	legacy-primary	DaemonClient.workspaceTools
GET /file	workspace_file_read	legacy-primary	DaemonClient.readWorkspaceFile
GET /file/bytes	workspace_file_bytes	legacy-primary	DaemonClient.readWorkspaceFileBytes
GET /stat	workspace_file_read	legacy-primary	DaemonClient.fileStat
GET /list	workspace_file_read	legacy-primary	DaemonClient.dirList
GET /glob	workspace_file_read	legacy-primary	DaemonClient.glob

These singular routes target the primary workspace. Integrations that expose multiple registered workspaces should use the workspace-qualified counterparts documented in the full protocol and preflight workspace_qualified_rest_core.

Additional documented APIs

The 25 operations above are the stable OpenAPI integration contract. The following operations complete the index of HTTP routes with dedicated protocol sections. They are documented v1 surfaces, but they are outside that compact OpenAPI contract because they are conditional, administrative, or primarily support first-party clients. Preflight every listed capability and treat a missing capability as an unavailable route. A grouped row can contain several operations when they share ownership and an SDK family.

Area	Operations	Capability and scope	TypeScript SDK
Operator state	GET /daemon/status · GET /brand · GET /daemon/update · POST /daemon/update/prepare · POST /daemon/update/restart	daemon_status, web_shell_brand, daemon_update; process-global	DaemonClient.daemonStatus, DaemonClient.brand, DaemonClient.daemonUpdateStatus, DaemonClient.prepareDaemonUpdate, DaemonClient.restartDaemonForUpdate
Workspace registration	POST /workspaces · PATCH /workspaces/:workspace · DELETE /workspaces/:workspace · GET /workspace-registrations · DELETE /workspace-registrations/:id	dynamic_workspace_registration, persistent_workspace_registration, workspace_display_name, workspace_runtime_removal; process-global or selected-runtime	DaemonClient.addWorkspace, DaemonClient.updateWorkspace, WorkspaceDaemonClient.remove; registration-store routes use raw REST
Workspace runtime status	GET /workspace/mcp · GET /workspace/skills · GET /workspace/providers · GET /workspace/env · GET /workspace/preflight	workspace_mcp, workspace_skills, workspace_providers, workspace_env, workspace_preflight; legacy-primary	DaemonClient.workspaceMcp, DaemonClient.workspaceSkills, DaemonClient.workspaceProviders, DaemonClient.workspaceEnv, DaemonClient.workspacePreflight
File mutation	POST /file/write · POST /file/edit	workspace_file_write; legacy-primary	DaemonClient.writeWorkspaceFile, DaemonClient.editWorkspaceFile
Directory mutation	POST /workspaces/:workspace/directory/create · POST /workspaces/:workspace/directory/delete	workspace_qualified_rest_core plus workspace_directory_create or workspace_directory_delete; selected-runtime, trusted local only	WorkspaceDaemonClient.createWorkspaceDirectory, WorkspaceDaemonClient.deleteWorkspaceDirectory
Session inspection and tasks	GET /session/:id/supported-commands · GET /session/:id/tasks · GET /session/:id/tasks/:taskId/runtime · POST /session/:id/tasks/:taskId/workflow-action · GET /session/:id/lsp · GET /session/:id/resources	session_supported_commands, session_tasks, session_lsp, session_resources; live-session-owner	DaemonClient.sessionSupportedCommands, sessionTasks, sessionTaskRuntime, sessionWorkflowTaskAction, sessionLspStatus, sessionResources
Workspace-qualified history	GET /workspaces/:workspace/session/:id/transcript · GET /workspaces/:workspace/session/:id/export · GET /workspaces/:workspace/session/:id/archive/export	workspace_persisted_transcript, workspace_session_export, workspace_archived_session_export; persisted-workspace	WorkspaceDaemonClient.getSessionTranscriptPage, WorkspaceDaemonClient.exportSession, exportArchivedSession
Worktree recovery	POST /session/:id/worktree-reset	session_worktree_reset_v1; live-session-owner	DaemonClient.resetWorktreeSession
Persisted session catalog	POST /sessions/catalog · GET /workspace/:id/session-info · GET /workspaces/:workspace/session-info · GET /workspace/:id/sessions · GET /workspaces/:workspace/sessions · GET /workspaces/:workspace/sessions/live-state · POST /sessions/live-state	session_info, session_list; persisted-workspace; session_catalog_batch; persisted-workspace per member; workspace_session_live_state, workspace_session_live_state_batch; selected-runtime (batch: per member), trusted-only, memory-only	DaemonClient.getStandaloneSession, DaemonClient.listWorkspaceSessions, listSessionsCatalog, getWorkspaceSessionLiveState, getSessionsLiveState
Session organization	GET /workspace/:id/session-groups · POST /workspace/:id/session-groups · PATCH /workspace/:id/session-groups/:groupId · DELETE /workspace/:id/session-groups/:groupId · PATCH /session/:id/organization · PATCH /workspaces/:workspace/session/:id/organization	session_organization; legacy-primary or persisted-workspace	DaemonClient.listSessionGroups, DaemonClient.createSessionGroup, DaemonClient.updateSessionGroup, DaemonClient.deleteSessionGroup, DaemonClient.updateSessionOrganization; WorkspaceDaemonClient.updateSessionOrganization
Bulk persisted-session changes	POST /sessions/delete · POST /sessions/archive · POST /sessions/unarchive	session_archive; legacy-primary	DaemonClient.deleteSessionsData, DaemonClient.archiveSessionsData, DaemonClient.unarchiveSessionsData
Message deletion	GET /session/:id/message-groups · POST /session/:id/messages/delete	session_message_deletion; live-session-owner	DaemonClient.getMessageGroups, DaemonClient.deleteMessageGroups
Streaming side questions	POST /session/:id/btw/stream · DELETE /session/:id/btw/stream/:requestId	session_btw_stream; live-session-owner	DaemonClient.streamSessionBtw, raw REST for cancellation
Optional session controls	POST /session/:id/recap · POST /session/:id/generate · POST /session/:id/approval-mode	session_recap, session_generation, session_approval_mode_control; live-session-owner	DaemonClient.recapSession, raw REST for generation, DaemonClient.setSessionApprovalMode
Workspace configuration	POST /workspace/tools/:name/enable · POST /workspace/skills/:name/enable · POST /workspace/skills/enable · POST /workspace/init · POST /workspace/mcp/reload · POST /workspace/mcp/:server/restart · POST /language	workspace_tool_toggle, workspace_skill_settings_toggle, workspace_skill_settings_batch_toggle, workspace_init, workspace_mcp_manage, workspace_mcp_restart, user_language_sync; legacy-primary or process-global	DaemonClient.setWorkspaceToolEnabled, DaemonClient.setWorkspaceSkillEnabled, DaemonClient.setWorkspaceSkillsEnabled, DaemonClient.initWorkspace, DaemonClient.reloadWorkspaceMcp, DaemonClient.restartMcpServer, setUserLanguage
Skill runtime refresh	POST /workspace/skills/refresh	workspace_session_refresh; legacy-primary	DaemonClient.refreshWorkspaceSkills
Device-flow authentication	POST /workspace/auth/device-flow · GET /workspace/auth/device-flow/:id · DELETE /workspace/auth/device-flow/:id · GET /workspace/auth/status	auth_device_flow; legacy-primary	DaemonClient.startDeviceFlow, getDeviceFlow, cancelDeviceFlow, getAuthStatus

Routes without a dedicated protocol section are intentionally absent from this index. They may be first-party Web Shell plumbing or conditional implementation surfaces and are not promoted to an integration contract by omission.

Common protocol rules

• Authenticate normal routes with Authorization: Bearer <token>. A default loopback /health probe may be exempt; non-loopback binds are not.
• Send X-Qwen-Client-Id when a create/load response supplied one. It is an attachment and attribution identifier, not an end-user security principal.
• Treat error bodies as additive. Branch primarily on HTTP status and the stable code or errorKind when present.
• Preserve SSE response headers and disable proxy buffering. Resume with both Last-Event-ID and X-Qwen-Event-Epoch when the daemon supplied an epoch.
• A workspace trust boundary is not tenant isolation. Run separate daemons when security principals or process-level failure boundaries must be independent.