doneyet API reference
Every endpoint, runnable from this page. Paste your token above, expand an endpoint, fill in the blanks, and Send — or copy the exact curl.
Heads up on “Send”. Your browser calls the API directly. Because the docs live on
doneyet.io and the API on app.doneyet.io, a live request only succeeds if your workspace allow-lists this origin for CORS (DONEYET_CORS_ALLOW). If a request is blocked, use Copy as curl — it always works from a terminal. Read-only endpoints need no token; write endpoints need the matching token above.Authentication
doneyet uses bearer tokens. Pick the token that matches the endpoint's badge:
| Tier | How to send it | Used by |
|---|---|---|
| PAT | Authorization: Bearer <PAT> | Operators & CI. Workspace-scoped Personal Access Token (mint under Admin → Access tokens or dyt pat create). |
| run | Authorization: Bearer <run-token> | The producer of one run. Returned by start-run; authorizes heartbeat / finish / steps for that run only. |
| read | none (optional Basic) | Dashboards & scrapers. Public unless a read gate (DONEYET_READ_BASIC) is configured. |
A PAT already carries its workspace, so no extra header is needed. Dashboard/SSO sessions instead select a workspace with the X-Doneyet-Workspace header (under “advanced” above).