{
  "openapi": "3.1.0",
  "info": {
    "title": "PDF Access Cloud API",
    "version": "1.0.0-beta",
    "description": "HTTP tunnel management. Connector tokens are returned once and used separately from API keys."
  },
  "servers": [
    {
      "url": "https://pdf-access-cloud.com"
    }
  ],
  "components": {
    "securitySchemes": {
      "bearerAuth": {
        "type": "http",
        "scheme": "bearer"
      }
    }
  },
  "paths": {
    "/api/tunnels": {
      "get": {
        "summary": "List tunnels",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "responses": {
          "200": {
            "description": "Success"
          },
          "401": {
            "description": "Missing or invalid credentials"
          },
          "429": {
            "description": "Rate or account limit exceeded"
          }
        }
      },
      "post": {
        "summary": "Create a tunnel",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "name"
                ],
                "properties": {
                  "name": {
                    "type": "string",
                    "minLength": 2,
                    "maxLength": 80
                  }
                }
              }
            }
          }
        },
        "responses": {
          "201": {
            "description": "Success"
          },
          "401": {
            "description": "Missing or invalid credentials"
          },
          "429": {
            "description": "Rate or account limit exceeded"
          }
        }
      }
    },
    "/api/tunnels/{id}": {
      "delete": {
        "summary": "Delete a tunnel",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "Success"
          },
          "401": {
            "description": "Missing or invalid credentials"
          },
          "429": {
            "description": "Rate or account limit exceeded"
          }
        }
      }
    },
    "/api/tunnels/{id}/token": {
      "post": {
        "summary": "Rotate connector token",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Success"
          },
          "401": {
            "description": "Missing or invalid credentials"
          },
          "429": {
            "description": "Rate or account limit exceeded"
          }
        }
      }
    },
    "/api/keys": {
      "get": {
        "summary": "List API keys",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "responses": {
          "200": {
            "description": "Success"
          },
          "401": {
            "description": "Missing or invalid credentials"
          },
          "429": {
            "description": "Rate or account limit exceeded"
          }
        }
      },
      "post": {
        "summary": "Create an API key",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "name"
                ],
                "properties": {
                  "name": {
                    "type": "string",
                    "minLength": 2,
                    "maxLength": 80
                  }
                }
              }
            }
          }
        },
        "responses": {
          "201": {
            "description": "Success"
          },
          "401": {
            "description": "Missing or invalid credentials"
          },
          "429": {
            "description": "Rate or account limit exceeded"
          }
        }
      }
    },
    "/api/keys/{id}": {
      "delete": {
        "summary": "Revoke an API key",
        "security": [
          {
            "bearerAuth": []
          }
        ],
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "204": {
            "description": "Success"
          },
          "401": {
            "description": "Missing or invalid credentials"
          },
          "429": {
            "description": "Rate or account limit exceeded"
          }
        }
      }
    }
  }
}