> ## Documentation Index > Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # List onboarding activation > Requires scopes: eval:read ## OpenAPI ````yaml /api-reference/openapi.json get /api/onboarding/activation openapi: 3.1.2 info: title: EvalGate API version: 5.1.0 description: EvalGate API. See docs/api-contract.md for stability commitments. servers: - url: https://evalgate.com description: Production - url: http://localhost:3000 description: Local security: [] paths: /api/onboarding/activation: get: tags: - onboarding summary: List onboarding activation description: 'Requires scopes: eval:read' operationId: get_onboarding_activation parameters: - name: harnessPresetKey in: query required: false schema: type: string - name: repositoryId in: query required: false schema: type: string - name: rootPath in: query required: false schema: type: string - name: requestedRef in: query required: false schema: type: string - name: targetSha in: query required: false schema: type: string responses: '200': description: Successful response content: application/json: schema: $ref: >- #/components/schemas/GetApiOnboardingActivationResponse200ApplicationJson '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '409': $ref: '#/components/responses/Conflict' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/InternalError' '503': $ref: '#/components/responses/ServiceUnavailable' security: - bearerAuth: [] components: schemas: GetApiOnboardingActivationResponse200ApplicationJson: type: object properties: intakePreview: oneOf: - type: 'null' - type: object properties: manifest: type: object properties: schemaVersion: type: number enum: - 2 manifestHash: type: string observedAt: type: string processing: type: object properties: warnings: type: array items: type: string stage: oneOf: - type: string enum: - resolved - type: string enum: - blocked - type: string enum: - stale - type: string enum: - connected - type: string enum: - statically_understood - type: string enum: - baseline_verified - type: string enum: - runtime_proven - type: string enum: - ready readiness: oneOf: - type: string enum: - blocked - type: string enum: - ready - type: string enum: - review_required blockers: type: array items: type: string additionalProperties: false required: - warnings - stage - readiness - blockers identityHash: type: string repository: type: object properties: id: type: number name: type: string installationId: type: number owner: type: string fullName: type: string defaultBranch: type: string requestedRef: type: string targetSha: type: string rootPath: type: string rootTreeSha: type: string additionalProperties: false required: - id - name - installationId - owner - fullName - defaultBranch - requestedRef - targetSha - rootPath - rootTreeSha branches: type: array items: type: object properties: name: type: string isDefault: type: boolean sha: type: string additionalProperties: false required: - name - isDefault - sha repositoryKind: type: object properties: confidence: type: number kind: oneOf: - type: string enum: - unknown - type: string enum: - application - type: string enum: - library - type: string enum: - agent_harness - type: string enum: - monorepo - type: string enum: - mixed evidence: type: array items: type: object properties: path: type: string reason: type: string contentHash: type: string additionalProperties: false required: - path - reason additionalProperties: false required: - confidence - kind - evidence workspaceRoots: type: array items: type: object properties: path: type: string kind: oneOf: - type: string enum: - repository - type: string enum: - application - type: string enum: - package - type: string enum: - example manifestPaths: type: array items: type: string recommended: type: boolean additionalProperties: false required: - path - kind - manifestPaths - recommended harnessVariants: type: array items: type: object properties: label: type: string configHash: type: string evidence: type: array items: type: object properties: path: type: string reason: type: string contentHash: type: string additionalProperties: false required: - path - reason capabilities: type: array items: oneOf: - type: string enum: - mcp - type: string enum: - subagents - type: string enum: - network - type: string enum: - persistence - type: string enum: - read_files - type: string enum: - write_files - type: string enum: - shell - type: string enum: - code_execution - type: string enum: - browser - type: string enum: - compaction - type: string enum: - self_modification - type: string enum: - tool_calling key: type: string supported: type: boolean isolation: oneOf: - type: string enum: - none - type: string enum: - sandbox_preferred - type: string enum: - oci_required sourcePath: type: string privilegeClass: oneOf: - type: string enum: - read_only - type: string enum: - workspace_write - type: string enum: - host_mutating - type: string enum: - self_modifying comparisonGroup: type: string description: type: string blockerReason: type: string additionalProperties: false required: - label - configHash - evidence - capabilities - key - supported - isolation - sourcePath - privilegeClass - comparisonGroup selectedHarnessKey: oneOf: - type: 'null' - type: string verificationPlan: type: object properties: packageManager: oneOf: - type: 'null' - type: string installCommand: oneOf: - type: 'null' - type: string baselineCommands: type: array items: type: string requiredServices: type: array items: type: string ports: type: array items: type: number timeoutMs: type: number hiddenVerifierRequired: type: boolean cleanupRequired: type: boolean additionalProperties: false required: - packageManager - installCommand - baselineCommands - requiredServices - ports - timeoutMs - hiddenVerifierRequired - cleanupRequired executionPolicy: type: object properties: network: oneOf: - type: string enum: - deny_all - type: string enum: - https_allowlist isolation: oneOf: - type: string enum: - sandbox_preferred - type: string enum: - oci_required telemetry: oneOf: - type: string enum: - redacted - type: string enum: - disabled secrets: type: string enum: - brokered writablePaths: type: array items: type: string forbiddenPaths: type: array items: type: string additionalProperties: false required: - network - isolation - telemetry - secrets - writablePaths - forbiddenPaths executionEnvelope: type: object properties: taskVersionId: oneOf: - type: 'null' - type: string verifierVersionId: oneOf: - type: 'null' - type: string repositorySha: type: string harnessConfigHash: oneOf: - type: 'null' - type: string runnerImageDigest: oneOf: - type: 'null' - type: string modelRouteRef: oneOf: - type: 'null' - type: string workspaceHash: oneOf: - type: 'null' - type: string additionalProperties: false required: - taskVersionId - verifierVersionId - repositorySha - harnessConfigHash - runnerImageDigest - modelRouteRef - workspaceHash evidenceBridge: type: object properties: requiredCanonicalIds: type: array items: type: string acceptedEventTypes: type: array items: type: string finishReasonRequired: type: boolean artifactManifestRequired: type: boolean additionalProperties: false required: - requiredCanonicalIds - acceptedEventTypes - finishReasonRequired - artifactManifestRequired claims: type: array items: type: object properties: label: type: string evidence: type: array items: type: object properties: path: type: string reason: type: string contentHash: type: string additionalProperties: false required: - path - reason state: oneOf: - type: string enum: - unknown - type: string enum: - partial - type: string enum: - static_detected - type: string enum: - runtime_observed - type: string enum: - externally_verified key: type: string additionalProperties: false required: - label - evidence - state - key comparisonPolicy: type: object properties: universalMetrics: type: array items: type: string featureSpecificMetrics: type: object additionalProperties: type: array items: type: string inapplicableResult: type: string enum: - not_applicable infrastructureRetries: type: string enum: - excluded additionalProperties: false required: - universalMetrics - featureSpecificMetrics - inapplicableResult - infrastructureRetries additionalProperties: false required: - schemaVersion - manifestHash - observedAt - processing - identityHash - repository - branches - repositoryKind - workspaceRoots - harnessVariants - selectedHarnessKey - verificationPlan - executionPolicy - executionEnvelope - evidenceBridge - claims - comparisonPolicy requiresPrivilegedConfirmation: type: boolean commitComparison: type: object properties: requestedRef: type: string targetSha: type: string remoteHeadSha: type: string relation: oneOf: - type: string enum: - exact - type: string enum: - unknown - type: string enum: - diverged - type: string enum: - behind - type: string enum: - ahead aheadBy: oneOf: - type: 'null' - type: number behindBy: oneOf: - type: 'null' - type: number targetExists: type: boolean targetReachableFromRef: type: boolean observedAt: type: string additionalProperties: false required: - requestedRef - targetSha - remoteHeadSha - relation - aheadBy - behindBy - targetExists - targetReachableFromRef - observedAt additionalProperties: false required: - manifest - requiresPrivilegedConfirmation - commitComparison funnel: type: string enum: - repo-first steps: type: object properties: signedIn: type: boolean enum: - true hasOrganization: type: boolean githubConfigured: type: boolean githubConnected: type: boolean repositoryCount: type: number selectedRepositoryId: oneOf: - type: 'null' - type: number selectedRepositoryFullName: oneOf: - type: 'null' - type: string scanStarted: type: boolean latestScanRunId: oneOf: - type: 'null' - type: string activationCompleted: type: boolean additionalProperties: false required: - signedIn - hasOrganization - githubConfigured - githubConnected - repositoryCount - selectedRepositoryId - selectedRepositoryFullName - scanStarted - latestScanRunId - activationCompleted repositories: type: array items: type: object properties: id: type: number fullName: type: string defaultBranch: type: string status: type: string additionalProperties: false required: - id - fullName - defaultBranch - status currentIntake: oneOf: - type: 'null' - type: object properties: id: type: string version: type: number scanRunId: oneOf: - type: 'null' - type: string manifest: type: object properties: schemaVersion: type: number enum: - 2 manifestHash: type: string observedAt: type: string processing: type: object properties: warnings: type: array items: type: string stage: oneOf: - type: string enum: - resolved - type: string enum: - blocked - type: string enum: - stale - type: string enum: - connected - type: string enum: - statically_understood - type: string enum: - baseline_verified - type: string enum: - runtime_proven - type: string enum: - ready readiness: oneOf: - type: string enum: - blocked - type: string enum: - ready - type: string enum: - review_required blockers: type: array items: type: string additionalProperties: false required: - warnings - stage - readiness - blockers identityHash: type: string repository: type: object properties: id: type: number name: type: string installationId: type: number owner: type: string fullName: type: string defaultBranch: type: string requestedRef: type: string targetSha: type: string rootPath: type: string rootTreeSha: type: string additionalProperties: false required: - id - name - installationId - owner - fullName - defaultBranch - requestedRef - targetSha - rootPath - rootTreeSha branches: type: array items: type: object properties: name: type: string isDefault: type: boolean sha: type: string additionalProperties: false required: - name - isDefault - sha repositoryKind: type: object properties: confidence: type: number kind: oneOf: - type: string enum: - unknown - type: string enum: - application - type: string enum: - library - type: string enum: - agent_harness - type: string enum: - monorepo - type: string enum: - mixed evidence: type: array items: type: object properties: path: type: string reason: type: string contentHash: type: string additionalProperties: false required: - path - reason additionalProperties: false required: - confidence - kind - evidence workspaceRoots: type: array items: type: object properties: path: type: string kind: oneOf: - type: string enum: - repository - type: string enum: - application - type: string enum: - package - type: string enum: - example manifestPaths: type: array items: type: string recommended: type: boolean additionalProperties: false required: - path - kind - manifestPaths - recommended harnessVariants: type: array items: type: object properties: label: type: string configHash: type: string evidence: type: array items: type: object properties: path: type: string reason: type: string contentHash: type: string additionalProperties: false required: - path - reason capabilities: type: array items: oneOf: - type: string enum: - mcp - type: string enum: - subagents - type: string enum: - network - type: string enum: - persistence - type: string enum: - read_files - type: string enum: - write_files - type: string enum: - shell - type: string enum: - code_execution - type: string enum: - browser - type: string enum: - compaction - type: string enum: - self_modification - type: string enum: - tool_calling key: type: string supported: type: boolean isolation: oneOf: - type: string enum: - none - type: string enum: - sandbox_preferred - type: string enum: - oci_required sourcePath: type: string privilegeClass: oneOf: - type: string enum: - read_only - type: string enum: - workspace_write - type: string enum: - host_mutating - type: string enum: - self_modifying comparisonGroup: type: string description: type: string blockerReason: type: string additionalProperties: false required: - label - configHash - evidence - capabilities - key - supported - isolation - sourcePath - privilegeClass - comparisonGroup selectedHarnessKey: oneOf: - type: 'null' - type: string verificationPlan: type: object properties: packageManager: oneOf: - type: 'null' - type: string installCommand: oneOf: - type: 'null' - type: string baselineCommands: type: array items: type: string requiredServices: type: array items: type: string ports: type: array items: type: number timeoutMs: type: number hiddenVerifierRequired: type: boolean cleanupRequired: type: boolean additionalProperties: false required: - packageManager - installCommand - baselineCommands - requiredServices - ports - timeoutMs - hiddenVerifierRequired - cleanupRequired executionPolicy: type: object properties: network: oneOf: - type: string enum: - deny_all - type: string enum: - https_allowlist isolation: oneOf: - type: string enum: - sandbox_preferred - type: string enum: - oci_required telemetry: oneOf: - type: string enum: - redacted - type: string enum: - disabled secrets: type: string enum: - brokered writablePaths: type: array items: type: string forbiddenPaths: type: array items: type: string additionalProperties: false required: - network - isolation - telemetry - secrets - writablePaths - forbiddenPaths executionEnvelope: type: object properties: taskVersionId: oneOf: - type: 'null' - type: string verifierVersionId: oneOf: - type: 'null' - type: string repositorySha: type: string harnessConfigHash: oneOf: - type: 'null' - type: string runnerImageDigest: oneOf: - type: 'null' - type: string modelRouteRef: oneOf: - type: 'null' - type: string workspaceHash: oneOf: - type: 'null' - type: string additionalProperties: false required: - taskVersionId - verifierVersionId - repositorySha - harnessConfigHash - runnerImageDigest - modelRouteRef - workspaceHash evidenceBridge: type: object properties: requiredCanonicalIds: type: array items: type: string acceptedEventTypes: type: array items: type: string finishReasonRequired: type: boolean artifactManifestRequired: type: boolean additionalProperties: false required: - requiredCanonicalIds - acceptedEventTypes - finishReasonRequired - artifactManifestRequired claims: type: array items: type: object properties: label: type: string evidence: type: array items: type: object properties: path: type: string reason: type: string contentHash: type: string additionalProperties: false required: - path - reason state: oneOf: - type: string enum: - unknown - type: string enum: - partial - type: string enum: - static_detected - type: string enum: - runtime_observed - type: string enum: - externally_verified key: type: string additionalProperties: false required: - label - evidence - state - key comparisonPolicy: type: object properties: universalMetrics: type: array items: type: string featureSpecificMetrics: type: object additionalProperties: type: array items: type: string inapplicableResult: type: string enum: - not_applicable infrastructureRetries: type: string enum: - excluded additionalProperties: false required: - universalMetrics - featureSpecificMetrics - inapplicableResult - infrastructureRetries additionalProperties: false required: - schemaVersion - manifestHash - observedAt - processing - identityHash - repository - branches - repositoryKind - workspaceRoots - harnessVariants - selectedHarnessKey - verificationPlan - executionPolicy - executionEnvelope - evidenceBridge - claims - comparisonPolicy createdAt: type: string additionalProperties: false required: - id - version - scanRunId - manifest - createdAt nextCommands: type: array items: type: string installCommands: type: array items: type: string activationRun: oneOf: - type: 'null' - type: object properties: id: type: string lifecycle: oneOf: - type: string enum: - approved - type: string enum: - failed - type: string enum: - queued - type: string enum: - completed - type: string enum: - running - type: string enum: - stale - type: string enum: - partial progress: type: object properties: stage: type: string completed: oneOf: - type: 'null' - type: number total: oneOf: - type: 'null' - type: number findings: oneOf: - type: 'null' - type: number additionalProperties: false required: - stage - completed - total - findings failure: oneOf: - type: 'null' - type: object properties: code: type: string message: type: string retryable: type: boolean additionalProperties: false required: - message - retryable identity: type: object properties: repositoryId: type: number requestedRef: type: string targetSha: type: string rootPath: type: string harnessPresetKey: oneOf: - type: 'null' - type: string manifestHash: type: string additionalProperties: false required: - repositoryId - requestedRef - targetSha - rootPath - harnessPresetKey - manifestHash observation: type: object properties: remoteHeadSha: oneOf: - type: 'null' - type: string relation: oneOf: - type: 'null' - type: string aheadBy: oneOf: - type: 'null' - type: number behindBy: oneOf: - type: 'null' - type: number observedAt: oneOf: - type: 'null' - type: string additionalProperties: false required: - remoteHeadSha - relation - aheadBy - behindBy - observedAt result: oneOf: - type: 'null' - type: object properties: kind: oneOf: - type: 'null' - type: string enum: - 'null' - type: string enum: - baseline_ready - type: string enum: - no_opportunities - type: string enum: - partial_evidence opportunityCount: oneOf: - type: 'null' - type: number checksPlanned: oneOf: - type: 'null' - type: number additionalProperties: false required: - kind - opportunityCount - checksPlanned report: oneOf: - type: 'null' - type: object properties: href: type: string additionalProperties: false required: - href createdAt: type: string updatedAt: type: string additionalProperties: false required: - id - lifecycle - progress - failure - identity - observation - result - report - createdAt - updatedAt organizationId: $ref: '#/components/schemas/OrganizationId' additionalProperties: false required: - intakePreview - funnel - steps - repositories - currentIntake - nextCommands - installCommands - activationRun - organizationId OrganizationId: type: string format: uuid ApiError: type: object properties: error: type: object properties: code: type: string enum: - UNAUTHORIZED - FORBIDDEN - NOT_FOUND - INVALID_REFERENCE - VALIDATION_ERROR - RATE_LIMITED - CONFLICT - INTERNAL_ERROR - SERVICE_UNAVAILABLE - QUOTA_EXCEEDED - FEATURE_LIMIT_REACHED - NO_ORG_MEMBERSHIP - SHARE_REVOKED - SHARE_EXPIRED - SHARE_UNAVAILABLE - PROVIDER_KEY_MISSING - PROVIDER_KEY_EXPIRED - PROVIDER_RATE_LIMITED - PROVIDER_UNAUTHORIZED - PROVIDER_UNAVAILABLE - AGENT_HANDOFF_INVALID - AGENT_HANDOFF_EXPIRED - AGENT_HANDOFF_DENIED - AGENT_HANDOFF_CONSUMED - PAYLOAD_TOO_LARGE - METHOD_NOT_ALLOWED message: type: string details: {} requestId: type: string format: uuid redaction: type: object properties: applied: type: boolean enum: - true fieldCount: type: integer minimum: 0 secretCount: type: integer minimum: 0 required: - applied - fieldCount - secretCount required: - code - message required: - error responses: ValidationError: description: Validation error content: application/json: schema: $ref: '#/components/schemas/ApiError' Unauthorized: description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: WWW-Authenticate: description: >- Bearer challenge. Agent-facing routes include the RFC 9728 resource_metadata URL. schema: type: string Forbidden: description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ApiError' NotFound: description: Resource not found content: application/json: schema: $ref: '#/components/schemas/ApiError' Conflict: description: Conflict content: application/json: schema: $ref: '#/components/schemas/ApiError' RateLimited: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: Retry-After: description: Delay in seconds before retrying when present. schema: type: integer minimum: 1 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string InternalError: description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ApiError' ServiceUnavailable: description: Service unavailable content: application/json: schema: $ref: '#/components/schemas/ApiError' securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: EvalGate API key description: >- Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes. x-evalgate-scopes-supported: - eval:read - eval:write - objectives:read - objectives:write - runs:read - runs:write - traces:read - traces:write - exports:download - reports:write - prompt:publish - scorer:publish - red_team:read - red_team:run - red_team:approve - docs:read - agent:read - agent:execute - admin:keys - admin:org x-evalgate-protected-resource-metadata: https://www.evalgate.com/.well-known/oauth-protected-resource ````