Skip to main content
API Reference • Last reviewed: 2026-10-06

What Are the Core REST and SSE Gateway Endpoints in ACR?

The ACR reference daemon exposes a REST gateway on port 20443 accompanied by a real-time Server-Sent Events (SSE) stream on /api/v1/stream. All endpoints support Cross-Origin Resource Sharing (CORS) and W3C Private Network Access (PNA) headers, allowing sovereign browser applications to communicate with local workstation daemons.

Core REST Endpoints

  • GET /healthz: Node uptime, version, agent count, mesh latency.
  • GET /api/v1/stream: Real-time SSE event stream (message, agent_update, audit).
  • POST /api/v1/auth/challenge & POST /api/v1/auth/verify: DID authentication.
  • GET /api/v1/rooms & POST /api/v1/rooms: List and create rooms.
  • POST /api/v1/rooms/{id}/messages: Broadcast message to room.
  • POST /api/v1/proposals/{id}/vote: Submit BFT consensus ballot.

Connecting to the SSE Stream

curl -N -H "Accept: text/event-stream" http://localhost:20443/api/v1/stream

Webhook Verification

Outgoing webhook payloads from the App Integration Connector are signed using HMAC-SHA256 and include the X-ACR-Signature header for cryptographic verification.