Workspace onboarding

Provisioned workspaces can request bucket access, transfer review and retention exceptions through an assigned operator. Direct anonymous access is not available. The gateway exposes a restricted distributed ingress surface for namespace routing and transfer review. This endpoint is operated as a self-hosted private storage gateway, so public documentation only covers onboarding, access review and pre-auth behavior.

• Workspace IDs are assigned by storage administration.
• Interactive sessions require a valid access policy and current approval state.
• API operations are restricted to approved credentials and audited transfer scopes.
• Unapproved requests will return unauthorized or access-denied responses.

Platform capabilities

• Distributed namespace routing for private cloud storage workspaces.
• Immutable backup windows for approved namespaces.
• Cross-region replication policies with manual restore approval.
• Workspace-scoped audit trails for transfer and retention review.

Authenticated workspace capabilities

• Approved sessions can enumerate namespace metadata and retention policy state.
• Authorized operators can review transfer queues, replication policies and snapshot windows.
• Restore requests are processed through a scoped namespace workflow with manual review.
• Workspace audit events remain restricted to approved operator scopes.

Public and pre-auth API surface

• POST /auth/login — validates workspace credentials and rejects unapproved sessions.
• GET /api/v1/session — returns the current session state or an authorization challenge.
• GET /api/v1/buckets — namespace listing is limited to approved workspace scope.
• GET /api/v1/transfers — transfer queue visibility is limited to approved transfer scope.
• GET /api/v1/snapshots — backup state is limited to approved backup scope.
• GET /api/v1/replication-policies — replication policy visibility is limited to approved scope.
• GET /api/v1/audit-events — audit event visibility is limited to approved audit scope.
• GET /api/v1/buckets/{bucket} — bucket metadata is limited to approved namespace scope.
• GET /api/v1/buckets/{bucket}/objects — object listings are limited to approved object-read scope.
• POST /api/v1/access-request — queues a manual review request for onboarding or restore coordination.
• GET /status.json — exposes a machine-readable gateway status summary.