Reference

Catalogues + tables. Look here when you need the exact name of an endpoint, a permission, a provider, or a KMS backend.

Page	What
HTTP API endpoints	Every route the api exposes today, the auth gate, and the response shape
Providers supported	Vault / AWS SM / GCP SM / Azure Key Vault — auth + config shape per provider
KMS backends	local / vault-transit / aws-kms — when to use each, env vars
Permissions catalog	The canonical list of permission strings used by auth.Require(perm)