The Qoder Cloud Agents API provides full management capabilities for cloud-hosted AI Agents, covering Agent creation, environment configuration, session management, event streaming, and more. All endpoints follow REST conventions and use JSON for requests and responses.
The API is currently at version
Every API request must include a PAT or SAT in the authentication header. Content-Type is recommended but not mandatory — the server can auto-detect it:
Successful response:
Metadata Search endpoints have a default per-caller in-flight concurrency limit of 10. Other APIs currently have no application-layer rate limit. The gateway layer also has global burst traffic suppression and DDoS protection, which may return 429 or 503 when triggered. Clients should implement exponential backoff retry for 5xx/429 (1s → 2s → 4s, max 3 retries).
The API is currently in Beta. Some functionality may change in future releases.
Gateway URL
| Environment | URL |
|---|---|
| Production (Managed Mode) | https://api.qoder.com.cn/api/v1/cloud |
| Production (Forward Mode) | https://api.qoder.com.cn/api/v1/forward |
Versioning
The API is currently at version v1. Endpoints use the mode-specific /api/v1/cloud or /api/v1/forward prefix; no additional version header is required.
Available APIs
| Resource | Description | Base path |
|---|---|---|
| Agents | Create, read, update, delete, and archive Agent instances | /agents |
| Environments | Manage runtime environment configurations | /environments |
| Sessions | Create Agent sessions and manage their lifecycle | /sessions |
| Events | Read and push session event streams | /events |
| Files | Upload files and manage associations | /files |
| Vaults | Securely store sensitive credentials | /vaults |
| Skills | Register and manage Agent skills | /skills |
| Memory Stores | Persistent memory storage | /memory_stores |
| Deployments | Scheduled deployment automation | /deployments |
| Work | Self-hosted Environment work queue and worker lease lifecycle | /environments/{environment_id}/work |
| Forward Templates | Forward Agent template definition, versioning, archiving, and cloning | /api/v1/forward/templates |
| Forward Identities | Forward identity creation, enable/disable, deletion, and Agent queries | /api/v1/forward/identities |
| Forward Service Account Tokens | Create, bind to an Identity, and revoke enterprise Service Account Tokens | /api/v1/forward/service_account_tokens |
| Forward Identity Configs | Per-identity template configuration and effective configuration queries | /api/v1/forward/identities/{identity_id}/templates |
| Forward Channels | Forward channel and QR code session management | /api/v1/forward/channels, /api/v1/forward/qr_sessions |
| Forward Sessions | Forward session lifecycle, events, and SSE streams | /api/v1/forward/sessions |
| Forward Environments | Forward environment lifecycle management | /api/v1/forward/environments |
| Forward Skills | Forward Skill lifecycle management | /api/v1/forward/skills |
| Forward Vaults | Forward Vault lifecycle management | /api/v1/forward/vaults |
| Forward Credentials | Vault-scoped credential management | /api/v1/forward/vaults/{vault_id}/credentials |
| Forward Files | Forward file upload, retrieval, download, and deletion | /api/v1/forward/files |
| Forward Schedules | Forward scheduled tasks and run history management | /api/v1/forward/schedules, /api/v1/forward/schedule_runs |
Request size limits
- Maximum request body size: 4 MB
- Requests exceeding this limit are truncated, causing JSON parsing to fail with
400 invalid_request_error(message: "Request body must be valid JSON.").
Required headers
Every API request must include a PAT or SAT in the authentication header. Content-Type is recommended but not mandatory — the server can auto-detect it:
Beta status
- The API surface is broadly stable, but signatures may receive minor adjustments in future iterations.
- New functionality ships behind new beta identifiers.
- Lock the API version and add compatibility handling when running in production.
- When using a Beta feature, declare its identifier with
x-qoder-beta.
| Beta identifier | Surface | Guide |
|---|---|---|
browser-use-2026-07-14 | browser_toolset_20260714, browser tools, and live preview | Browser Use (Beta) |
search-2026-08-31 | Metadata Search for Agents, Sessions, Files, Skills, Memory Stores, Deployments, Environments, and Vaults | Search skills by metadata (Beta) |