DVARA — Data Plane API
OpenAI-compatible model API served by the DVARA LLM Gateway component on port 8080. DVARA is an AI gateway that governs model, tool and agent-to-agent calls; the controls that run depend on the operation, deployment, and workspace configuration.
Chat, Responses, legacy completions, and text embeddings use the live model-call governance path. Files and batches use a narrower asynchronous contract: DVARA scans an uploaded JSONL file as one blob, can gate batch submission when a budget gate is available, and accounts for completed usage when a client retrieves a terminal batch. Individual JSONL lines do not traverse the live chat policy, guardrail, routing, or response-PII path.
Authentication. Send a workspace key as Authorization: Bearer gw_.... The gateway also reads the key from x-api-key and
x-goog-api-key. The key resolves to a workspace server-side. A missing
key is 401 api_key_required; an invalid, revoked or expired key is
401. A key whose scope list does not cover the operation is
403 api_key_scope. Error codes on the wire are lower case.
Not in this specification. Gemini's generateContent API under
/v1/gemini/** is served by one catch-all route, and its model names
can contain /, which an OpenAPI path cannot express. It is documented
on the Gemini generateContent API page. The
approval-webhook callback POST /v1/webhooks/actions/{action} takes no
API key and is not a model operation; the
LLM Gateway overview describes it.
Distribution. The core LLM Data Plane operations are available in Apache-2.0-licensed DVARA Open Source. Enterprise-only operations are marked on their individual pages and are not covered by that licence statement.
Authentication
- HTTP: Bearer Auth
- API Key: anthropicApiKey
A workspace API key, created in Flightdeck on the Enterprise platform
or with the key generator in DVARA Open Source. Pass as
Authorization: Bearer gw_<your-key>. The key resolves to a workspace
server-side — all downstream filters (policy, budget, audit) apply
under that workspace's configuration.
Security Scheme Type: | http |
|---|---|
HTTP Authorization Scheme: | bearer |
Bearer format: | gw_ |
The same DVARA workspace key, sent in x-api-key as Claude Code and
the Anthropic SDKs do. Read only when there is no
Authorization: Bearer key. Since 1.8.5.
Security Scheme Type: | apiKey |
|---|---|
Header parameter name: | x-api-key |
Contact DVARA: URL: https://dvarahq.com