| Method | Path | Summary | Auth |
|---|---|---|---|
| GET | /v1/url-auth-policies | List tenant URL authentication policies | API keySession |
| POST | /v1/url-auth-policies | Create a site-bound HMAC-SHA256 URL authentication policy | API keySession |
| GET | /v1/url-auth-policies/{id} | Get URL authentication policy metadata | API keySession |
| PATCH | /v1/url-auth-policies/{id} | Replace URL authentication policy fields using optimistic concurrency | API keySession |
| GET | /v1/url-auth-policies/{id}/edge-snapshot | Get the deterministic edge-compatible policy snapshot | API keySession |
| POST | /v1/url-auth-policies/{id}/revoke | Revoke the current previous key | API keySession |
| POST | /v1/url-auth-policies/{id}/rotate | Rotate the current HMAC key | API keySession |
Contract file：api/openapi/v1/control.yaml