Edge Functions HTTP API reference

Base URL. The URL of your project, for example https://my-app.aurabase.cloud. The project is identified by the host, so the paths below carry no project id. The long form /v1/functions/{project_id}/… is accepted as well.

Authentication. Send your key in the apikey header. Add Authorization: Bearer <JWT> to call as a signed-in user. The Studio calls the same routes with a console session token, which gives it the admin role.

Any other route answers 403 to anon and authenticated:

{ "error": { "code": "FORBIDDEN", "type": "forbidden", "request_id": "…",
  "message": "Accès interdit : Opération réservée au rôle service_role : seule l'invocation d'une fonction est ouverte aux clés publiques" } }

Format. Bodies are JSON and need Content-Type: application/json. A success is { "data": …, "meta": null }. A failure is { "error": { "code", "message", "type", "request_id" } }.

Function object.

Notes:

• POST is an upsert on name: posting an existing name replaces its code. An env_vars field in that body replaces the existing variables; omit it to keep them.
• In PATCH, permissions is merged field by field: { "permissions": { "timeout_secs": 60 } } keeps allow_net and memory_mb. A field outside its bounds returns 400.
• PUT …/env replaces the whole set of variables and is the only route that encrypts them. See secrets.
• A function with is_active: false is not found by invoke or by jobs.

curl -X POST "$AURA_URL/v1/functions" \
  -H "apikey: $AURA_SERVICE_ROLE_KEY" -H "Content-Type: application/json" \
  -d '{"name":"hello","runtime":"deno","code":"Deno.serve(() => new Response(\"ok\"))"}'

POST /v1/functions/{name}/invoke. Role: anon, authenticated or service_role.

Default response, always 200:

{ "data": { "status": 200, "headers": { "content-type": "application/json" },
  "body": { "greeting": "Hello, Ada!" }, "logs": [], "duration_ms": 74 }, "meta": null }

status is the status of your function. logs is empty for deno. In raw mode the response is your function's own: status, content-type, bytes, plus x-aurabase-invoke-origin: function.

Job object: id, project_id, function_name, payload, status (pending, running, completed, failed, dead), attempts, max_attempts, error, scheduled_at, started_at, completed_at, created_at. Behaviour: Jobs, cron and the dead-letter queue.

Entry: id, project_id, name, schedule (stored with 6 fields), function_name, payload, is_active, last_run, next_run, created_at.

Values and behaviour: Alerts.