{"name":"HermesOS / Hermes AI Office — Public API Catalog","description":"Public, safe endpoints exposed by the HermesOS website. These endpoints do not grant access to the internal Hermes runtime, private client data, CRM, messaging channels or the lead database. Internal and secret-protected routes are intentionally not listed.","updated":"2026-01-01","linkset":[{"anchor":"https://hermesos.md/","rel":"service-desc","href":"https://hermesos.md/api/openapi.json","type":"application/json","title":"OpenAPI description of the public endpoints"}],"endpoints":[{"name":"lead_pipeline_health","method":"GET","path":"/api/leads/health","purpose":"Non-sensitive operational status for the public lead intake (config booleans and safe aggregate counts only).","changesState":false,"consent":"none","auth":"none","rateLimit":"Subject to standard platform rate limiting.","dataHandling":"Returns only booleans and aggregate numbers. Never returns personal data, lead IDs, emails, phones, raw payloads, URLs or secrets.","safety":"Read-only. Safe for public monitoring and agent health checks."},{"name":"hermes_ai_pilot_chat","method":"POST","path":"/api/site-agent/chat","purpose":"Public closed-world assistant (Hermes AI Pilot). Answers questions about HermesOS and Hermes AI Office using approved public knowledge only.","changesState":false,"consent":"none","auth":"none","rateLimit":"Per-client rate limited; returns 429 with Retry-After when exceeded.","dataHandling":"Accepts a message, locale and short conversation history. Does not access internal runtime, private data, CRM, memory or the lead database.","safety":"No external actions. Declines or defers when a question falls outside public knowledge."},{"name":"lead_request","method":"POST","path":"/api/leads","purpose":"Submit a lead / implementation-map request. Requires explicit consent and at least one contact method.","changesState":true,"consent":"required (explicit, versioned consent)","auth":"none (public form submission)","rateLimit":"Subject to standard platform rate limiting.","dataHandling":"Stores the submitted request as the source of truth. There is NO public read access to stored leads. A success response indicates the request was accepted/persisted, not that any downstream delivery has completed.","safety":"Creates a lead record only. Performs no external actions visible to the submitter and exposes no stored data back to the public."}],"notListed":{"reason":"Internal, secret-protected and operational routes are intentionally omitted from this public catalog.","examples":["Internal integration/worker routes","Authentication callbacks"]},"boundaries":["No access to the internal Hermes runtime.","No access to private client data, CRM, memory or the lead database.","No external actions (no messaging, purchasing, scheduling or record changes).","No secrets, tokens, internal URLs or raw payloads are exposed.","Critical business actions require explicit owner approval."]}