No public endpoint yet
Foundation work must first prove profile locking, interruption recovery, signed browser updates, scoped authorization, and stable versioned contracts.
API documentation
A local API with the same lifecycle rules as the app
Isoline plans a versioned local API for authorized profile operations. The API is not publicly available yet; this page records the intended contract and release boundary.
Planned API surface
- List redacted profile metadata and lifecycle state.
- Start, stop, and focus profiles through the lifecycle service.
- Assign approved proxy references without returning stored secrets.
- Read scoped audit events and recovery status.
- Provision separately authorized CLI, SDK, Playwright, and MCP clients after the same gates pass.
Security boundary
Clients are untrusted. Access must be scoped, revocable, and profile-specific where possible. Raw cookies, credentials, proxy passwords, two-factor secrets, and encryption keys are excluded from normal responses.
Developer access
Public schemas, authentication instructions, examples, and compatibility guarantees will be published only with a working supported release.
Read implementation guides