API reference overview
For integration engineers wiring combo agent into existing systems—start here.
Sections
HTTP API
REST + streaming (SSE vs batch) — agents, sessions, completions, files, skills
Webhook events
Inbound integrations (forge / ALM / IM) and outbound callbacks
CLI
Admin utilities · bulk ingest · migrations · debugging
Base URLs & auth
Base URL
- SaaS:
https://api.your-combo-saas.com/v1 - On-premises:
http://<your-host>:9380/v1
Authentication
| Mode | Scenario | Header |
|---|---|---|
| API key | Service-to-service | Authorization: Bearer ragflow-<key> |
| JWT session | Web console | Authorization: Bearer <jwt> |
| Webhook signatures | Inbound callbacks | X-Combo-Signature: sha256=... |
Create API keys under Personal settings → API keys; webhook secrets under Integrations → Webhooks.
Versioning
- Stable surface:
/v1/*, backward compatible - Deprecation: ≥6 months notice via release notes before removal after another 6 months
- Responses may include
X-Deprecated: trueplusX-Deprecated-Sunset: <date>
Response envelopes
Default JSON
code | Class |
|---|---|
| 0 | Success |
| 1xxxx | Client issues (validation / ACL) |
| 2xxxx | Server faults |
| 3xxxx | Upstream faults (LLM / external APIs) |
Streaming (SSE)
Used for completions (text/event-stream):
Rate limits
Default per API key:
| Endpoint family | Ceiling |
|---|---|
| Completions | 60 req/min |
| File uploads | 10 req/min |
| Everything else | 300 req/min |
HTTP 429 Too Many Requests includes Retry-After.
SDKs & codegen
| Language | Status |
|---|---|
| Python | ✅ Supported (combo_sdk) |
| TypeScript/JavaScript | 🚧 Planned |
| Go / Java | On demand |
Community SDKs may be generated from the published OpenAPI document:
Quick samples
Python
curl
Tooling
- Postman collection — download from the admin console API page
- Swagger UI —
/v1/docs