curl --request POST \
--url https://api.usenexio.com/api/v1/engines/{engine_slug}/versions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"changelog": "<string>",
"version": "<string>",
"is_breaking_from_previous_major": true
}
'import requests
url = "https://api.usenexio.com/api/v1/engines/{engine_slug}/versions"
payload = {
"changelog": "<string>",
"version": "<string>",
"is_breaking_from_previous_major": True
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
changelog: '<string>',
version: '<string>',
is_breaking_from_previous_major: true
})
};
fetch('https://api.usenexio.com/api/v1/engines/{engine_slug}/versions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"version": "2.0",
"released_at": "2026-06-11T18:00:00Z",
"changelog": "v2 config: cover letter + budget review outputs.",
"is_breaking_from_previous_major": true,
"gate_verified": false,
"bump": "major",
"reasons": [
"output field removed: output.readiness_score"
]
}Publish engine version
Release the draft configuration as a new immutable version. Organization API key only.
curl --request POST \
--url https://api.usenexio.com/api/v1/engines/{engine_slug}/versions \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"changelog": "<string>",
"version": "<string>",
"is_breaking_from_previous_major": true
}
'import requests
url = "https://api.usenexio.com/api/v1/engines/{engine_slug}/versions"
payload = {
"changelog": "<string>",
"version": "<string>",
"is_breaking_from_previous_major": True
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
changelog: '<string>',
version: '<string>',
is_breaking_from_previous_major: true
})
};
fetch('https://api.usenexio.com/api/v1/engines/{engine_slug}/versions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"version": "2.0",
"released_at": "2026-06-11T18:00:00Z",
"changelog": "v2 config: cover letter + budget review outputs.",
"is_breaking_from_previous_major": true,
"gate_verified": false,
"bump": "major",
"reasons": [
"output field removed: output.readiness_score"
]
}Authorizations
Send the key as Authorization: Bearer <key>. Two kinds of key exist.
Organization keys are issued in the portal (Settings, then API keys),
each bound to one environment, shaped nx_<environment slug>_<64 hex>. They carry
no capabilities and pass every capability check, with one exception:
routes under /records, /actions, /operations,
/api/v1/engines/{id}/opportunities, /api/v1/graph and
/api/v1/catalog/documents accept an
organization key only when its environment is live, and refuse any
other with 403 scoped_key_required. Revocation takes effect within 60
seconds.
Scoped keys are issued by Nexio on request, shaped
nxsk_v1_<24 hex key id>_<43 character secret>. Each is bound to one
org, one environment, a set of engines and a set of capabilities. A
malformed, unknown or revoked nxsk_ key fails with 401 and is never
retried as an organization key. Revocation takes effect on the next
request. A scoped key without a route's capability gets 403
insufficient_capability; a scoped key not bound to the engine gets 403
engine_binding_forbidden.
Key-grantable capabilities: engines:read, runs:write, runs:read,
runs:defensibility:read, runs:test, catalog:read,
catalog:documents:read, webhooks:manage, conversations:use,
conversations:export, records:read, records:opportunities:run,
actions:write, actions:read, graph:read, records:analyze.
Routes that accept organization keys only (every scoped key gets 403
insufficient_capability): environment management, engine create,
update, configuration and publish, and conversation instance
authoring. Each operation description names the capability a scoped
key needs.
Path Parameters
Engine identifier slug (e.g. default).
Body
Human-readable summary recorded on the version row.
On exact_required engines, the version you expect; refused with 409 when it differs from the computed version. Ignored on other engines.
Accepted for compatibility; the schema comparator decides.
Response
The released version: freshly minted, or the existing latest
release (already_released: true) when the saved config is
already released. The body omits request_schema_hash and
response_schema_hash; read them from
GET /api/v1/engines/{engine_slug}/versions/{version}.
Two-tier major.minor identifier (e.g. 1.0, 1.3, 2.0).
^\d+\.\d+$When the version row was created.
Operator-supplied human-readable summary of what changed.
True only when this is a *.0 row AND a prior major ((major-1).*)
also exists for the same engine. The first-ever release of an
engine reports false.
True only on an engine's first release when the eval gate verified the candidate against a labeled evaluation set. Later releases report false.
SHA-256 of the exact normalized released request schema bytes.
^[0-9a-f]{64}$SHA-256 of the exact normalized released response schema bytes.
^[0-9a-f]{64}$Actor recorded at publish: a dashboard user ID for dashboard
publishes, api_key:<id> for API publishes. Omitted on
backfilled rows with no recorded actor.
The evaluation set that verified the release. Present only when gate_verified is true.
Present and true on the idempotent no-op.
Comparator verdict for a fresh publish. A first release reports minor.
major, minor Breaking-change reasons when bump is major.