# API Reference

> REST and gRPC APIs exposed by the Xisom runtime.

All HTTP endpoints are versioned under `/api/v1/` and require a bearer token. gRPC services are exposed on port `50051`.

## Authentication

```http
Authorization: Bearer <token>
```

Obtain tokens via the **Admin → API Keys** page or the `/api/v1/auth/token` endpoint.

## Inference

**POST** `/api/v1/inference`

**GET** `/api/v1/inference/{id}`

## Models

**GET** `/api/v1/models`
**POST** `/api/v1/models`
**POST** `/api/v1/models/{name}/promote`

## Datasources

**GET** `/api/v1/datasources`
**POST** `/api/v1/datasources`
**DELETE** `/api/v1/datasources/{id}`

## Observability

**GET** `/api/v1/stats/inference`

## OpenAPI

The full OpenAPI spec is published at `/api/v1/openapi.json` on every running device.