Enumerate the models an endpoint serves

Asks an endpoint for its model listing (GET <base_url>/models) and returns the ids it serves, each described with a context window, max output tokens, input modalities and reasoning support. Those come from the listing body itself when the server publishes them per entry (vLLM max_model_len, Mistral capabilities, OpenRouter context_length / architecture / supported_parameters, LM Studio max_context_length) — read from the response already in hand, nothing else is requested — and from the model catalog (Pi's pinned registry) otherwise; source says which described a given model. label always comes from the catalog. It works BEFORE a credential exists — the operator supplies providerId + api_key inline, or names a stored credentialId — and it persists nothing: no credential is created (the probe itself is recorded in the audit trail, without the key). Per-token cost is deliberately never returned: an endpoint serving a vendor's model id is not billed at the vendor's rate. A provider declaring a static model list (every subscription/OAuth provider) is refused — its token is never read or spent to enumerate models. A provider whose listing is unauthenticated has its key checked first by one minimal chat completion, so a rejected key answers auth_failed instead of a listing it did not unlock. A listing that declares a next page (Anthropic has_more / last_id, Google nextPageToken) is followed to its end, so a paginated endpoint is enumerated whole; truncated says when a page or model cap stopped the read instead; a page whose body streams past the size budget is refused as bad_response. Rate limited to 6 requests per minute.

POST/api/model-provider-credentials/discover

Authorization

better-auth.session_token<token>

Cookie session from Better Auth. Requires X-Org-Id header for org-scoped routes.

In: cookie

Header Parameters

X-Org-Id?string

Organization ID. Required for cookie auth. Not needed for API key auth (org resolved from key).

Formatuuid

Request Body

application/json

credentialId?string

An existing organization credential to enumerate. Built-in/system credentials are refused (operation_not_allowed).

Formatuuid

providerId?string

Canonical registry providerId (openai-compatible, openai, …). Discovered via GET /api/model-provider-credentials/registry.

Length1 <= length

api_key?string

API key for the endpoint. Used for this one request and never stored or echoed back.

Length1 <= length

base_url_override?string

Endpoint base URL. Accepted only for providers with baseUrlOverridable: true; defaults to the provider's defaultBaseUrl.

Formaturi

curl -X POST "https://your-instance/api/model-provider-credentials/discover" \  -H "Content-Type: application/json" \  -d '{}'

{
  "outcome": "ok",
  "models": [
    {
      "id": "string",
      "label": "string",
      "context_window": 0,
      "max_tokens": 0,
      "input": [
        "text"
      ],
      "reasoning": true,
      "source": "endpoint",
      "endpoint_capabilities": {
        "context_window": 1,
        "max_tokens": 1,
        "input": [
          "text"
        ],
        "reasoning": true
      }
    }
  ],
  "truncated": true,
  "message": "string"
}

{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "detail": "string",
  "instance": "string",
  "code": "string",
  "request_id": "string",
  "param": "string",
  "retry_after": 0,
  "errors": [
    {
      "field": "string",
      "code": "string",
      "message": "string",
      "title": "string",
      "candidate_connections": [
        {
          "id": "string",
          "label": "string",
          "account_id": "string",
          "owned_by_actor": true,
          "needs_reconnection": true
        }
      ],
      "connection_id": "string",
      "missing_scopes": [
        "string"
      ],
      "owned_by_actor": true,
      "required_scopes": [
        "string"
      ],
      "auth_key": "string",
      "required_auth_key": "string",
      "available_auth_keys": [
        "string"
      ],
      "connect_url": "http://example.com",
      "expiresAt": "2019-08-24T14:15:22Z",
      "packageId": "string"
    }
  ]
}

{
  "type": "https://docs.appstrate.dev/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Invalid or missing session",
  "code": "unauthorized",
  "request_id": "req_abc123"
}

{
  "type": "http://example.com",
  "title": "string",
  "status": 0,
  "detail": "string",
  "instance": "string",
  "code": "string",
  "request_id": "string",
  "param": "string",
  "retry_after": 0,
  "errors": [
    {
      "field": "string",
      "code": "string",
      "message": "string",
      "title": "string",
      "candidate_connections": [
        {
          "id": "string",
          "label": "string",
          "account_id": "string",
          "owned_by_actor": true,
          "needs_reconnection": true
        }
      ],
      "connection_id": "string",
      "missing_scopes": [
        "string"
      ],
      "owned_by_actor": true,
      "required_scopes": [
        "string"
      ],
      "auth_key": "string",
      "required_auth_key": "string",
      "available_auth_keys": [
        "string"
      ],
      "connect_url": "http://example.com",
      "expiresAt": "2019-08-24T14:15:22Z",
      "packageId": "string"
    }
  ]
}

{
  "type": "https://docs.appstrate.dev/errors/not-found",
  "title": "Not Found",
  "status": 404,
  "detail": "Resource not found",
  "code": "not_found",
  "request_id": "req_abc123"
}

{
  "type": "https://docs.appstrate.dev/errors/rate-limited",
  "title": "Rate Limited",
  "status": 429,
  "detail": "Too many requests. Please try again shortly.",
  "code": "rate_limited",
  "request_id": "req_abc123",
  "retry_after": 30
}

{
  "type": "https://docs.appstrate.dev/errors/internal-error",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "An unexpected error occurred. Please try again or contact support.",
  "code": "internal_error",
  "request_id": "req_abc123"
}