Overview
RevoCloud Plugin API (v1)
Section titled “RevoCloud Plugin API (v1)”The RevoCloud operations available to external plugins using a plugin JWT (obtained via the /external-plugin/oauth/token exchange). All routes are tenant-scoped to the token’s tenant. Responses are raw data payloads unless the X-Envelope header is sent (the token exchange itself is standard OAuth and unaffected).
- OpenAPI version: 3.0.1
Authentication
Section titled “ Authentication ”PluginBearer
Section titled “PluginBearer ”Plugin JWT obtained from POST /api/v1/{tenantId}/external-plugin/oauth/token (RFC 6749 authorization_code exchange with PKCE + private_key_jwt). The token is tenant-bound: it is only valid on routes for its own tenant.
Security scheme type: http
Bearer format: JWT