# Wraith API reference

Base: https://wraith-daemon-production.up.railway.app
Site calls: X-Wraith-Site-Key: wk_... · Partner calls: X-Wraith-Partner-Key: wp_...

## Detection
POST /api/v1/telemetry/ingest — kinematic batches from wraith.js → live verdict
POST /api/v1/classify — header/UA-only classification; records a session
GET  /api/v1/sessions — recent sessions (archetype, confidence, evidence)
GET  /api/v1/sessions/{id} — drill-down / replay
GET  /api/v1/metrics — per-site counters + rejected ingests

## Routing
POST /api/v1/route — {site, path, user_agent, headers} →
  {classification, session_id, rule, action{serve|redirect|webhook|none}}
GET/PUT /api/v1/sites/{site}/intents — ordered rules
  {path_glob, applies_to, action, source{url|inline|redirect|webhook}}
GET  /api/v1/llms/{site}.txt — generated llms.txt index
POST /api/v1/telemetry/aeo — report an agent-path serve

## Partner & sites
POST /api/v1/partners/register — → wp_ key
POST /api/v1/sites — register site → wk_ key + embed snippet
GET  /api/v1/sites — list your sites
GET  /api/v1/sites/{site}/verify?url= — install check
GET/PUT /api/v1/sites/{site}/rules — archetype → action defaults

## Calibration
POST /api/v1/labels — {site, session_id, archetype} (admin key)
GET  /api/v1/labels — labeled dataset