Skip to main content

Read the host's signed capability catalog

GET 
/v1/plugins/managed/catalog

Fetch the host's signed catalog, from the owner-configured private catalog or the built-in capability store, and verify it against the host's discovery trust before listing its releases: identity, sequence, platforms, size and digests, the signed permissions, capability ids, surfaces, durable operations and steward risk classes, and whether each release matches this host. When the source is the built-in store, its publisher trust is first verified and renewed through the store's TUF repository from the root this build ships (a newer revision is applied as published, never an older one; offline, the last verified copy is used). Requires plugins:read. Returns no addresses or credentials; selects, stages and installs nothing. A refused read answers 409 with one sentence naming the cause and the next step, such as an unconfigured or unreachable catalog, the HTTP status the catalog server answered, an untrusted publisher, an expired catalog, or built-in store trust that could not be verified.

Responses​

Successful Response