<!-- generated by src/lib/agentSkills/generator.ts; manual edits will be overwritten -->

# Endpoint reference

## Table of contents

- [`GET /api/settings/memory`](#get-apisettingsmemory)
- [`PUT /api/settings/memory`](#put-apisettingsmemory)
- [`GET /api/settings/qdrant`](#get-apisettingsqdrant)
- [`PUT /api/settings/qdrant`](#put-apisettingsqdrant)
- [`GET /api/settings/qdrant/health`](#get-apisettingsqdranthealth)
- [`POST /api/settings/qdrant/search`](#post-apisettingsqdrantsearch)
- [`POST /api/settings/qdrant/cleanup`](#post-apisettingsqdrantcleanup)
- [`GET /api/settings/qdrant/embedding-models`](#get-apisettingsqdrantembedding-models)
- [`GET /api/settings`](#get-apisettings)
- [`PATCH /api/settings`](#patch-apisettings)
- [`POST /api/settings/purge-request-history`](#post-apisettingspurge-request-history)
- [`GET /api/settings/compression`](#get-apisettingscompression)
- [`PUT /api/settings/compression`](#put-apisettingscompression)
- [`GET /api/settings/compression/mcp-accessibility`](#get-apisettingscompressionmcp-accessibility)
- [`PUT /api/settings/compression/mcp-accessibility`](#put-apisettingscompressionmcp-accessibility)
- [`GET /api/settings/payload-rules`](#get-apisettingspayload-rules)
- [`PUT /api/settings/payload-rules`](#put-apisettingspayload-rules)
- [`GET /api/settings/combo-defaults`](#get-apisettingscombo-defaults)
- [`GET /api/settings/proxy`](#get-apisettingsproxy)
- [`PATCH /api/settings/proxy`](#patch-apisettingsproxy)
- [`POST /api/settings/proxy/test`](#post-apisettingsproxytest)
- [`POST /api/settings/require-login`](#post-apisettingsrequire-login)
- [`GET /api/settings/ip-filter`](#get-apisettingsip-filter)
- [`PUT /api/settings/ip-filter`](#put-apisettingsip-filter)
- [`GET /api/settings/pii`](#get-apisettingspii)
- [`PUT /api/settings/pii`](#put-apisettingspii)
- [`POST /api/settings/pii/test`](#post-apisettingspiitest)
- [`GET /api/settings/system-prompt`](#get-apisettingssystem-prompt)
- [`PUT /api/settings/system-prompt`](#put-apisettingssystem-prompt)
- [`GET /api/settings/thinking-budget`](#get-apisettingsthinking-budget)
- [`PUT /api/settings/thinking-budget`](#put-apisettingsthinking-budget)
- [`GET /api/tags`](#get-apitags)
- [`GET /api/settings/quota-store`](#get-apisettingsquota-store)
- [`PUT /api/settings/quota-store`](#put-apisettingsquota-store)
- [`POST /api/settings/purge-usage-history`](#post-apisettingspurge-usage-history)
- [`GET /api/settings/authz-inventory`](#get-apisettingsauthz-inventory)
- [`GET /api/settings/auto-disable-accounts`](#get-apisettingsauto-disable-accounts)
- [`PUT /api/settings/auto-disable-accounts`](#put-apisettingsauto-disable-accounts)
- [`GET /api/settings/background-degradation`](#get-apisettingsbackground-degradation)
- [`POST /api/settings/background-degradation`](#post-apisettingsbackground-degradation)
- [`PUT /api/settings/background-degradation`](#put-apisettingsbackground-degradation)
- [`GET /api/settings/cache-config`](#get-apisettingscache-config)
- [`PUT /api/settings/cache-config`](#put-apisettingscache-config)
- [`GET /api/settings/cache-metrics`](#get-apisettingscache-metrics)
- [`DELETE /api/settings/cache-metrics`](#delete-apisettingscache-metrics)
- [`GET /api/settings/cc-discovery-metrics`](#get-apisettingscc-discovery-metrics)
- [`GET /api/settings/compression/rules`](#get-apisettingscompressionrules)
- [`GET /api/settings/compression/run-telemetry`](#get-apisettingscompressionrun-telemetry)
- [`GET /api/settings/database`](#get-apisettingsdatabase)
- [`PUT /api/settings/database`](#put-apisettingsdatabase)
- [`PATCH /api/settings/database`](#patch-apisettingsdatabase)
- [`POST /api/settings/database/integrity-check`](#post-apisettingsdatabaseintegrity-check)
- [`POST /api/settings/database/refresh-stats`](#post-apisettingsdatabaserefresh-stats)
- [`GET /api/settings/database/vacuum`](#get-apisettingsdatabasevacuum)
- [`POST /api/settings/database/vacuum`](#post-apisettingsdatabasevacuum)
- [`GET /api/settings/export-json`](#get-apisettingsexport-json)
- [`GET /api/settings/favicon`](#get-apisettingsfavicon)
- [`GET /api/settings/feature-flags`](#get-apisettingsfeature-flags)
- [`PUT /api/settings/feature-flags`](#put-apisettingsfeature-flags)
- [`DELETE /api/settings/feature-flags`](#delete-apisettingsfeature-flags)
- [`GET /api/settings/free-proxies`](#get-apisettingsfree-proxies)
- [`DELETE /api/settings/free-proxies`](#delete-apisettingsfree-proxies)
- [`POST /api/settings/free-proxies/{id}/add-to-pool`](#post-apisettingsfree-proxiesidadd-to-pool)
- [`POST /api/settings/free-proxies/bulk-add-to-pool`](#post-apisettingsfree-proxiesbulk-add-to-pool)
- [`GET /api/settings/free-proxies/stats`](#get-apisettingsfree-proxiesstats)
- [`POST /api/settings/free-proxies/sync`](#post-apisettingsfree-proxiessync)
- [`POST /api/settings/import-json`](#post-apisettingsimport-json)
- [`DELETE /api/settings/lkgp-cache`](#delete-apisettingslkgp-cache)
- [`GET /api/settings/local-corpus`](#get-apisettingslocal-corpus)
- [`POST /api/settings/local-corpus`](#post-apisettingslocal-corpus)
- [`DELETE /api/settings/local-corpus`](#delete-apisettingslocal-corpus)
- [`GET /api/settings/mitm`](#get-apisettingsmitm)
- [`POST /api/settings/mitm`](#post-apisettingsmitm)
- [`PUT /api/settings/mitm`](#put-apisettingsmitm)
- [`GET /api/settings/model-aliases`](#get-apisettingsmodel-aliases)
- [`POST /api/settings/model-aliases`](#post-apisettingsmodel-aliases)
- [`PUT /api/settings/model-aliases`](#put-apisettingsmodel-aliases)
- [`DELETE /api/settings/model-aliases`](#delete-apisettingsmodel-aliases)
- [`GET /api/settings/models-dev`](#get-apisettingsmodels-dev)
- [`POST /api/settings/models-dev`](#post-apisettingsmodels-dev)
- [`GET /api/settings/notion`](#get-apisettingsnotion)
- [`POST /api/settings/notion`](#post-apisettingsnotion)
- [`DELETE /api/settings/notion`](#delete-apisettingsnotion)
- [`GET /api/settings/obsidian`](#get-apisettingsobsidian)
- [`POST /api/settings/obsidian`](#post-apisettingsobsidian)
- [`DELETE /api/settings/obsidian`](#delete-apisettingsobsidian)
- [`GET /api/settings/obsidian/webdav`](#get-apisettingsobsidianwebdav)
- [`POST /api/settings/obsidian/webdav`](#post-apisettingsobsidianwebdav)
- [`DELETE /api/settings/obsidian/webdav`](#delete-apisettingsobsidianwebdav)
- [`GET /api/settings/oneproxy`](#get-apisettingsoneproxy)
- [`POST /api/settings/oneproxy`](#post-apisettingsoneproxy)
- [`DELETE /api/settings/oneproxy`](#delete-apisettingsoneproxy)
- [`POST /api/settings/oneproxy/rotate`](#post-apisettingsoneproxyrotate)
- [`GET /api/settings/proxies`](#get-apisettingsproxies)
- [`POST /api/settings/proxies`](#post-apisettingsproxies)
- [`PATCH /api/settings/proxies`](#patch-apisettingsproxies)
- [`DELETE /api/settings/proxies`](#delete-apisettingsproxies)
- [`POST /api/settings/proxies/{id}/repair-relay`](#post-apisettingsproxiesidrepair-relay)
- [`GET /api/settings/proxies/assignments`](#get-apisettingsproxiesassignments)
- [`PUT /api/settings/proxies/assignments`](#put-apisettingsproxiesassignments)
- [`POST /api/settings/proxies/auto-test`](#post-apisettingsproxiesauto-test)
- [`POST /api/settings/proxies/batch-activate`](#post-apisettingsproxiesbatch-activate)
- [`POST /api/settings/proxies/batch-delete`](#post-apisettingsproxiesbatch-delete)
- [`PUT /api/settings/proxies/bulk-assign`](#put-apisettingsproxiesbulk-assign)
- [`POST /api/settings/proxies/bulk-import`](#post-apisettingsproxiesbulk-import)
- [`GET /api/settings/proxies/egress`](#get-apisettingsproxiesegress)
- [`POST /api/settings/proxies/egress`](#post-apisettingsproxiesegress)
- [`GET /api/settings/proxies/health`](#get-apisettingsproxieshealth)
- [`POST /api/settings/proxies/migrate`](#post-apisettingsproxiesmigrate)
- [`GET /api/settings/proxies/pool`](#get-apisettingsproxiespool)
- [`PUT /api/settings/proxies/pool`](#put-apisettingsproxiespool)
- [`PATCH /api/settings/proxies/pool`](#patch-apisettingsproxiespool)
- [`DELETE /api/settings/proxies/pool`](#delete-apisettingsproxiespool)
- [`GET /api/settings/proxies/pool/egress-observation`](#get-apisettingsproxiespoolegress-observation)
- [`POST /api/settings/proxy/cloudflare-deploy`](#post-apisettingsproxycloudflare-deploy)
- [`POST /api/settings/proxy/deno-deploy`](#post-apisettingsproxydeno-deploy)
- [`POST /api/settings/proxy/vercel-deploy`](#post-apisettingsproxyvercel-deploy)
- [`POST /api/settings/purge-call-logs`](#post-apisettingspurge-call-logs)
- [`POST /api/settings/purge-detailed-logs`](#post-apisettingspurge-detailed-logs)
- [`POST /api/settings/purge-logs`](#post-apisettingspurge-logs)
- [`POST /api/settings/purge-quota-snapshots`](#post-apisettingspurge-quota-snapshots)
- [`GET /api/settings/quota/state`](#get-apisettingsquotastate)
- [`POST /api/settings/quota/state`](#post-apisettingsquotastate)
- [`GET /api/settings/reasoning-routing-rules`](#get-apisettingsreasoning-routing-rules)
- [`POST /api/settings/reasoning-routing-rules`](#post-apisettingsreasoning-routing-rules)
- [`GET /api/settings/reasoning-routing-rules/{id}`](#get-apisettingsreasoning-routing-rulesid)
- [`PATCH /api/settings/reasoning-routing-rules/{id}`](#patch-apisettingsreasoning-routing-rulesid)
- [`DELETE /api/settings/reasoning-routing-rules/{id}`](#delete-apisettingsreasoning-routing-rulesid)
- [`POST /api/settings/reasoning-routing-rules/simulate`](#post-apisettingsreasoning-routing-rulessimulate)
- [`GET /api/settings/task-routing`](#get-apisettingstask-routing)
- [`POST /api/settings/task-routing`](#post-apisettingstask-routing)
- [`PUT /api/settings/task-routing`](#put-apisettingstask-routing)
- [`GET /api/settings/tier-config`](#get-apisettingstier-config)
- [`PUT /api/settings/tier-config`](#put-apisettingstier-config)
- [`GET /api/settings/transfer/catalog`](#get-apisettingstransfercatalog)
- [`POST /api/settings/transfer/export`](#post-apisettingstransferexport)
- [`POST /api/settings/transfer/preview`](#post-apisettingstransferpreview)
- [`POST /api/settings/transfer/import`](#post-apisettingstransferimport)

### GET /api/settings/memory

Get memory settings

Returns the extended memory settings including 7 new fields added in plan 21 (embeddingSource, embeddingProviderModel, transformersEnabled, staticEnabled, rerankEnabled, rerankProviderModel, vectorStore).

```bash
curl http://localhost:20128/api/settings/memory \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/memory

Update memory settings

Update any subset of the extended memory settings. All fields are optional; only provided fields are updated. Schema: `MemorySettingsExtendedSchema`.

```bash
curl -X PUT http://localhost:20128/api/settings/memory \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/qdrant

Get Qdrant settings

Returns current Qdrant configuration. The `apiKey` field is never returned raw — use `hasApiKey` / `apiKeyMasked` instead.

```bash
curl http://localhost:20128/api/settings/qdrant \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/qdrant

Update Qdrant settings

Update Qdrant configuration. Pass `apiKey: ""` to remove the stored key. Schema: `QdrantSettingsUpdateSchema`.

```bash
curl -X PUT http://localhost:20128/api/settings/qdrant \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/qdrant/health

Qdrant health probe

Performs a liveness check against the configured Qdrant instance. Returns latency and any connection error (sanitized — no stack traces).

```bash
curl http://localhost:20128/api/settings/qdrant/health \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/qdrant/search

Qdrant semantic search test

Performs a test semantic search against the Qdrant collection. Useful for validating that the integration works end-to-end. Schema: `QdrantSearchSchema`.

```bash
curl -X POST http://localhost:20128/api/settings/qdrant/search \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/qdrant/cleanup

Clean up expired Qdrant points

Removes Qdrant points for memories that have expired or exceeded the configured retention window.

```bash
curl -X POST http://localhost:20128/api/settings/qdrant/cleanup \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/qdrant/embedding-models

List Qdrant embedding models

Returns the list of embedding models available for use with Qdrant.

```bash
curl http://localhost:20128/api/settings/qdrant/embedding-models \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings

Get application settings

```bash
curl http://localhost:20128/api/settings \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PATCH /api/settings

Update settings

Security-policy keys (`requireLogin`, `newPassword`, every `oidc*` key, `corsOrigins`, `bruteForceProtection`, the LOCAL_ONLY bypass list) need `currentPassword` and an operator credential (dashboard session, local CLI, or login disabled); API keys of any scope and `oma_` access tokens get 403 on them. Ordinary settings stay writable for a manage-scoped key or an `admin` access token. Every mutation needs the `admin` access-token scope.

```bash
curl -X PATCH http://localhost:20128/api/settings \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/purge-request-history

Clear request log history

Deletes `call_logs`, legacy `request_detail_logs`, and local request artifact files under `DATA_DIR/call_logs`.

```bash
curl -X POST http://localhost:20128/api/settings/purge-request-history \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/compression

Get global compression settings

```bash
curl http://localhost:20128/api/settings/compression \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/compression

Update global compression settings

Partial update: only the sent top-level keys change. `engines` merges by engine id — an entry overwrites only the fields it sends, engines left out are kept as-is, and until an engines row is stored the merge base is the map derived from the legacy per-engine settings.

```bash
curl -X PUT http://localhost:20128/api/settings/compression \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/compression/mcp-accessibility

Get the MCP tool-output accessibility (trimming) config

```bash
curl http://localhost:20128/api/settings/compression/mcp-accessibility \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/compression/mcp-accessibility

Update the MCP tool-output accessibility (trimming) config

Partial-merge update. Numeric floors (e.g. a maxTextChars below the truncation-tail reserve) are folded back to the safe defaults server-side, so the response reflects the effective config.

```bash
curl -X PUT http://localhost:20128/api/settings/compression/mcp-accessibility \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/payload-rules

Get payload rules configuration

Returns the current payload rules used to mutate outgoing request payloads before they
are sent upstream.

Requires a dashboard management session cookie when management auth is enabled.


```bash
curl http://localhost:20128/api/settings/payload-rules \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/payload-rules

Update payload rules configuration

Persists and hot reloads payload rules. The legacy input field `default-raw` is accepted
on writes and normalized to `defaultRaw` in responses/runtime state.

Requires a dashboard management session cookie when management auth is enabled.


```bash
curl -X PUT http://localhost:20128/api/settings/payload-rules \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/combo-defaults

Get combo default settings

```bash
curl http://localhost:20128/api/settings/combo-defaults \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/proxy

Get proxy settings

```bash
curl http://localhost:20128/api/settings/proxy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PATCH /api/settings/proxy

Update proxy settings

```bash
curl -X PATCH http://localhost:20128/api/settings/proxy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/proxy/test

Test proxy connection

```bash
curl -X POST http://localhost:20128/api/settings/proxy/test \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/require-login

Set the management password and/or toggle the login requirement

Open without a credential only during the first-run bootstrap window (no password configured yet). Afterwards the write is operator-only: a dashboard session, the local CLI, or an instance with login disabled. API keys of any scope and `oma_` access tokens are refused with 403. A dashboard session must send `currentPassword` to replace an existing password; the local CLI may reset it without one (recovery path).

```bash
curl -X POST http://localhost:20128/api/settings/require-login \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/ip-filter

Get IP filter configuration

Returns the current IP filter settings including blacklist, whitelist, and temp bans.

```bash
curl http://localhost:20128/api/settings/ip-filter \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/ip-filter

Update IP filter configuration

Configure IP filtering with blacklist/whitelist modes, add/remove individual IPs, and manage temp bans.


```bash
curl -X PUT http://localhost:20128/api/settings/ip-filter \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/pii

Get PII masking settings

Returns the opt-in flag state (`PII_REDACTION_ENABLED`, `PII_RESPONSE_SANITIZATION`),
the per-type selection (`enabledTypes`, `null` = all built-in types), the custom
patterns and in-memory detection counters (counts only, never matched values).


```bash
curl http://localhost:20128/api/settings/pii \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/pii

Update PII masking settings

Replaces the per-type selection and/or the custom pattern list. Custom regex patterns
that fail the safe-regex (catastrophic backtracking) check, do not compile, or match an
empty string are refused with 400. Does not turn masking on.


```bash
curl -X PUT http://localhost:20128/api/settings/pii \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/pii/test

Test a custom PII pattern

Dry-runs one pattern against a sample of at most 8 KB. Nothing is stored.

```bash
curl -X POST http://localhost:20128/api/settings/pii/test \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/system-prompt

Get system prompt configuration

Returns the current system prompt injection settings.

```bash
curl http://localhost:20128/api/settings/system-prompt \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/system-prompt

Update system prompt configuration

```bash
curl -X PUT http://localhost:20128/api/settings/system-prompt \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/thinking-budget

Get thinking budget configuration

Returns the current thinking/reasoning budget settings for AI models.

```bash
curl http://localhost:20128/api/settings/thinking-budget \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/thinking-budget

Update thinking budget configuration

```bash
curl -X PUT http://localhost:20128/api/settings/thinking-budget \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/tags

List Ollama-compatible model tags

Returns models in Ollama /api/tags format for Ollama client compatibility

```bash
curl http://localhost:20128/api/tags \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/quota-store

Get current quota store driver settings

Redis URL is masked in the response (shows only scheme+host).

```bash
curl http://localhost:20128/api/settings/quota-store \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/quota-store

Update quota store driver settings

```bash
curl -X PUT http://localhost:20128/api/settings/quota-store \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/purge-usage-history

Purge usage history

Dashboard-only. Purges stored usage-history records.

```bash
curl -X POST http://localhost:20128/api/settings/purge-usage-history \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/authz-inventory

GET settings › authz inventory

```bash
curl http://localhost:20128/api/settings/authz-inventory \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/auto-disable-accounts

GET settings › auto disable accounts

```bash
curl http://localhost:20128/api/settings/auto-disable-accounts \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/auto-disable-accounts

PUT settings › auto disable accounts

```bash
curl -X PUT http://localhost:20128/api/settings/auto-disable-accounts \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/background-degradation

GET settings › background degradation

```bash
curl http://localhost:20128/api/settings/background-degradation \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/background-degradation

POST settings › background degradation

```bash
curl -X POST http://localhost:20128/api/settings/background-degradation \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PUT /api/settings/background-degradation

PUT settings › background degradation

```bash
curl -X PUT http://localhost:20128/api/settings/background-degradation \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/cache-config

GET settings › cache config

```bash
curl http://localhost:20128/api/settings/cache-config \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/cache-config

PUT settings › cache config

```bash
curl -X PUT http://localhost:20128/api/settings/cache-config \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/cache-metrics

GET settings › cache metrics

```bash
curl http://localhost:20128/api/settings/cache-metrics \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### DELETE /api/settings/cache-metrics

DELETE settings › cache metrics

```bash
curl -X DELETE http://localhost:20128/api/settings/cache-metrics \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/cc-discovery-metrics

GET settings › cc discovery metrics

```bash
curl http://localhost:20128/api/settings/cc-discovery-metrics \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/compression/rules

GET settings › compression › rules

```bash
curl http://localhost:20128/api/settings/compression/rules \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/compression/run-telemetry

GET settings › compression › run telemetry

```bash
curl http://localhost:20128/api/settings/compression/run-telemetry \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/database

GET settings › database

```bash
curl http://localhost:20128/api/settings/database \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/database

PUT settings › database

```bash
curl -X PUT http://localhost:20128/api/settings/database \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PATCH /api/settings/database

PATCH settings › database

```bash
curl -X PATCH http://localhost:20128/api/settings/database \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/database/integrity-check

POST settings › database › integrity check

Runs SQLite `PRAGMA quick_check` on demand and stores the result. Reading the storage settings (GET /api/settings/database) only returns the last stored result and never runs the scan.

```bash
curl -X POST http://localhost:20128/api/settings/database/integrity-check \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/database/refresh-stats

POST settings › database › refresh stats

```bash
curl -X POST http://localhost:20128/api/settings/database/refresh-stats \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/database/vacuum

GET settings › database › vacuum

```bash
curl http://localhost:20128/api/settings/database/vacuum \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/database/vacuum

POST settings › database › vacuum

```bash
curl -X POST http://localhost:20128/api/settings/database/vacuum \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/export-json

GET settings › export json

```bash
curl http://localhost:20128/api/settings/export-json \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/favicon

GET settings › favicon

```bash
curl http://localhost:20128/api/settings/favicon \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/feature-flags

GET settings › feature flags

```bash
curl http://localhost:20128/api/settings/feature-flags \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/feature-flags

PUT settings › feature flags

```bash
curl -X PUT http://localhost:20128/api/settings/feature-flags \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/feature-flags

DELETE settings › feature flags

```bash
curl -X DELETE http://localhost:20128/api/settings/feature-flags \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/free-proxies

GET settings › free proxies

```bash
curl http://localhost:20128/api/settings/free-proxies \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### DELETE /api/settings/free-proxies

DELETE settings › free proxies

```bash
curl -X DELETE http://localhost:20128/api/settings/free-proxies \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/free-proxies/{id}/add-to-pool

POST settings › free proxies › <id> › add to pool

```bash
curl -X POST http://localhost:20128/api/settings/free-proxies/{id}/add-to-pool \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/free-proxies/bulk-add-to-pool

POST settings › free proxies › bulk add to pool

```bash
curl -X POST http://localhost:20128/api/settings/free-proxies/bulk-add-to-pool \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/free-proxies/stats

GET settings › free proxies › stats

```bash
curl http://localhost:20128/api/settings/free-proxies/stats \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/free-proxies/sync

POST settings › free proxies › sync

```bash
curl -X POST http://localhost:20128/api/settings/free-proxies/sync \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/import-json

POST settings › import json

```bash
curl -X POST http://localhost:20128/api/settings/import-json \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/lkgp-cache

DELETE settings › lkgp cache

```bash
curl -X DELETE http://localhost:20128/api/settings/lkgp-cache \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/local-corpus

GET settings › local corpus

```bash
curl http://localhost:20128/api/settings/local-corpus \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/local-corpus

POST settings › local corpus

```bash
curl -X POST http://localhost:20128/api/settings/local-corpus \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/local-corpus

DELETE settings › local corpus

```bash
curl -X DELETE http://localhost:20128/api/settings/local-corpus \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/mitm

GET settings › mitm

```bash
curl http://localhost:20128/api/settings/mitm \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/mitm

POST settings › mitm

```bash
curl -X POST http://localhost:20128/api/settings/mitm \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PUT /api/settings/mitm

PUT settings › mitm

```bash
curl -X PUT http://localhost:20128/api/settings/mitm \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/model-aliases

GET settings › model aliases

```bash
curl http://localhost:20128/api/settings/model-aliases \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/model-aliases

POST settings › model aliases

```bash
curl -X POST http://localhost:20128/api/settings/model-aliases \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PUT /api/settings/model-aliases

PUT settings › model aliases

```bash
curl -X PUT http://localhost:20128/api/settings/model-aliases \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/model-aliases

DELETE settings › model aliases

```bash
curl -X DELETE http://localhost:20128/api/settings/model-aliases \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/models-dev

GET settings › models dev

```bash
curl http://localhost:20128/api/settings/models-dev \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/models-dev

POST settings › models dev

```bash
curl -X POST http://localhost:20128/api/settings/models-dev \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/notion

GET settings › notion

```bash
curl http://localhost:20128/api/settings/notion \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/notion

POST settings › notion

```bash
curl -X POST http://localhost:20128/api/settings/notion \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/notion

DELETE settings › notion

```bash
curl -X DELETE http://localhost:20128/api/settings/notion \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/obsidian

GET settings › obsidian

```bash
curl http://localhost:20128/api/settings/obsidian \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/obsidian

POST settings › obsidian

```bash
curl -X POST http://localhost:20128/api/settings/obsidian \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/obsidian

DELETE settings › obsidian

```bash
curl -X DELETE http://localhost:20128/api/settings/obsidian \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/obsidian/webdav

GET settings › obsidian › webdav

```bash
curl http://localhost:20128/api/settings/obsidian/webdav \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/obsidian/webdav

POST settings › obsidian › webdav

```bash
curl -X POST http://localhost:20128/api/settings/obsidian/webdav \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/obsidian/webdav

DELETE settings › obsidian › webdav

```bash
curl -X DELETE http://localhost:20128/api/settings/obsidian/webdav \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/oneproxy

GET settings › oneproxy

```bash
curl http://localhost:20128/api/settings/oneproxy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/oneproxy

POST settings › oneproxy

```bash
curl -X POST http://localhost:20128/api/settings/oneproxy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/oneproxy

DELETE settings › oneproxy

```bash
curl -X DELETE http://localhost:20128/api/settings/oneproxy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/oneproxy/rotate

POST settings › oneproxy › rotate

```bash
curl -X POST http://localhost:20128/api/settings/oneproxy/rotate \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/proxies

GET settings › proxies

```bash
curl http://localhost:20128/api/settings/proxies \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/proxies

POST settings › proxies

```bash
curl -X POST http://localhost:20128/api/settings/proxies \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PATCH /api/settings/proxies

PATCH settings › proxies

```bash
curl -X PATCH http://localhost:20128/api/settings/proxies \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/proxies

DELETE settings › proxies

```bash
curl -X DELETE http://localhost:20128/api/settings/proxies \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/proxies/{id}/repair-relay

POST settings › proxies › <id> › repair relay

```bash
curl -X POST http://localhost:20128/api/settings/proxies/{id}/repair-relay \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/proxies/assignments

GET settings › proxies › assignments

```bash
curl http://localhost:20128/api/settings/proxies/assignments \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/proxies/assignments

PUT settings › proxies › assignments

```bash
curl -X PUT http://localhost:20128/api/settings/proxies/assignments \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/proxies/auto-test

POST settings › proxies › auto test

```bash
curl -X POST http://localhost:20128/api/settings/proxies/auto-test \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/proxies/batch-activate

POST settings › proxies › batch activate

```bash
curl -X POST http://localhost:20128/api/settings/proxies/batch-activate \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/proxies/batch-delete

POST settings › proxies › batch delete

```bash
curl -X POST http://localhost:20128/api/settings/proxies/batch-delete \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PUT /api/settings/proxies/bulk-assign

PUT settings › proxies › bulk assign

```bash
curl -X PUT http://localhost:20128/api/settings/proxies/bulk-assign \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/proxies/bulk-import

POST settings › proxies › bulk import

```bash
curl -X POST http://localhost:20128/api/settings/proxies/bulk-import \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/proxies/egress

GET settings › proxies › egress

```bash
curl http://localhost:20128/api/settings/proxies/egress \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/proxies/egress

POST settings › proxies › egress

```bash
curl -X POST http://localhost:20128/api/settings/proxies/egress \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/proxies/health

GET settings › proxies › health

```bash
curl http://localhost:20128/api/settings/proxies/health \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/proxies/migrate

POST settings › proxies › migrate

```bash
curl -X POST http://localhost:20128/api/settings/proxies/migrate \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/proxies/pool

GET settings › proxies › pool

```bash
curl http://localhost:20128/api/settings/proxies/pool \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/proxies/pool

PUT settings › proxies › pool

```bash
curl -X PUT http://localhost:20128/api/settings/proxies/pool \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PATCH /api/settings/proxies/pool

PATCH settings › proxies › pool

```bash
curl -X PATCH http://localhost:20128/api/settings/proxies/pool \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/proxies/pool

DELETE settings › proxies › pool

```bash
curl -X DELETE http://localhost:20128/api/settings/proxies/pool \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### GET /api/settings/proxies/pool/egress-observation

GET settings › proxies › pool › egress observation

Read-only observation of how many distinct egress IPs actually served the members of a proxy pool over the last 24 h, read from the proxy log (numbers only, never used for routing). Opt-in through the PROXY_POOL_EGRESS_OBSERVATION feature flag: while it is off, or when the read fails, the body is JSON null. Results are cached for 30 seconds per normalized scope (key is read as account, global as the stored global pool).

```bash
curl http://localhost:20128/api/settings/proxies/pool/egress-observation \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/proxy/cloudflare-deploy

POST settings › proxy › cloudflare deploy

```bash
curl -X POST http://localhost:20128/api/settings/proxy/cloudflare-deploy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/proxy/deno-deploy

POST settings › proxy › deno deploy

```bash
curl -X POST http://localhost:20128/api/settings/proxy/deno-deploy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/proxy/vercel-deploy

POST settings › proxy › vercel deploy

```bash
curl -X POST http://localhost:20128/api/settings/proxy/vercel-deploy \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/purge-call-logs

POST settings › purge call logs

```bash
curl -X POST http://localhost:20128/api/settings/purge-call-logs \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/purge-detailed-logs

POST settings › purge detailed logs

```bash
curl -X POST http://localhost:20128/api/settings/purge-detailed-logs \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/purge-logs

POST settings › purge logs

```bash
curl -X POST http://localhost:20128/api/settings/purge-logs \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/purge-quota-snapshots

POST settings › purge quota snapshots

```bash
curl -X POST http://localhost:20128/api/settings/purge-quota-snapshots \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/quota/state

GET settings › quota › state

```bash
curl http://localhost:20128/api/settings/quota/state \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/quota/state

POST settings › quota › state

```bash
curl -X POST http://localhost:20128/api/settings/quota/state \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/reasoning-routing-rules

GET settings › reasoning routing rules

```bash
curl http://localhost:20128/api/settings/reasoning-routing-rules \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/reasoning-routing-rules

POST settings › reasoning routing rules

```bash
curl -X POST http://localhost:20128/api/settings/reasoning-routing-rules \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/reasoning-routing-rules/{id}

GET settings › reasoning routing rules › <id>

```bash
curl http://localhost:20128/api/settings/reasoning-routing-rules/{id} \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PATCH /api/settings/reasoning-routing-rules/{id}

PATCH settings › reasoning routing rules › <id>

```bash
curl -X PATCH http://localhost:20128/api/settings/reasoning-routing-rules/{id} \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### DELETE /api/settings/reasoning-routing-rules/{id}

DELETE settings › reasoning routing rules › <id>

```bash
curl -X DELETE http://localhost:20128/api/settings/reasoning-routing-rules/{id} \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/reasoning-routing-rules/simulate

POST settings › reasoning routing rules › simulate

```bash
curl -X POST http://localhost:20128/api/settings/reasoning-routing-rules/simulate \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/task-routing

GET settings › task routing

```bash
curl http://localhost:20128/api/settings/task-routing \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/task-routing

POST settings › task routing

```bash
curl -X POST http://localhost:20128/api/settings/task-routing \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### PUT /api/settings/task-routing

PUT settings › task routing

```bash
curl -X PUT http://localhost:20128/api/settings/task-routing \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/tier-config

GET settings › tier config

```bash
curl http://localhost:20128/api/settings/tier-config \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### PUT /api/settings/tier-config

PUT settings › tier config

```bash
curl -X PUT http://localhost:20128/api/settings/tier-config \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### GET /api/settings/transfer/catalog

GET settings › transfer › catalog

Provider accounts selectable for a selective transfer (id, provider, auth type, name, email, group). Never returns a credential.

```bash
curl http://localhost:20128/api/settings/transfer/catalog \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN"
```

### POST /api/settings/transfer/export

POST settings › transfer › export

Seals the selected provider accounts, plus the custom provider nodes they use, under the caller's passphrase (scrypt + AES-256-GCM) and returns the file as an attachment. Credentials are never written in plaintext; the cleartext header carries counts only.

```bash
curl -X POST http://localhost:20128/api/settings/transfer/export \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/transfer/preview

POST settings › transfer › preview

Opens a transfer file with its passphrase and reports, per account and provider node, whether it is new, identical, in conflict or unsupported on this install, with the allowed actions (add, skip, replace). Writes nothing and never returns a credential.

```bash
curl -X POST http://localhost:20128/api/settings/transfer/preview \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```

### POST /api/settings/transfer/import

POST settings › transfer › import

Applies a transfer file with per-item decisions keyed `connection:<id>` / `node:<id>` (add, skip, replace; omitted keys use the recommended action). Every decision is validated before the first write, a pre-import database backup is taken, nothing is deleted, and destination priority, active flag and proxy settings are kept.

```bash
curl -X POST http://localhost:20128/api/settings/transfer/import \
  -H "Authorization: Bearer $OMNIROUTE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{}'
```