Authentication
All API requests require an X-Relay-Token header. Tokens are scoped per tenant and can be rotated from the dashboard.
Endpoints
GET/api/v2/resolve
Resolve a package name and version constraint to a concrete artifact.
GET/api/v2/fetch
Download the artifact by its content hash.
GET/api/v2/manifest
Retrieve the full manifest for a package version.
POST/api/v2/publish
Publish a new artifact to the relay (enterprise tenants only).
Response Format
All responses are JSON. Errors follow RFC 7807 Problem Details.