Space or → advance · ← back · F fullscreen · Esc exit
Lunnoa Automate
01DEV to UAT: what the release enables for corporate and financial services clients
Technical summary
12
API domains exposed
Bearer + JWT
Auth model
Per key
Rate limiting
Machine authentication
Workspace-scoped lna_ keys provision a SERVICE_ACCOUNT user; Bearer auth resolves into the same RBAC-checked shape as JWT login.
Curated public contract
Only @PublicApi() operations are exposed, flagged x-public true, with coverage checks enforcing documentation quality.
Per-key throttling
Machine traffic is rate-limited per key instead of per source IP.
OpenAPI / response contracts
Expanded Swagger DTOs across 12 domains, from agents to workflow apps.
Executions
New execution path computation utility; UI polling extracted into use-execution-polling.
Admin UI
New API Keys page: one-time secret reveal, workspace and role selection, optional expiry.
Agent / Action UI
Shared action UI utilities and output field components.
Database
Migration add_api_keys_service_accounts.
Documentation
api-authentication.md, public-api.md, and OpenAPI updates.
Business value
IT / Security leadership
Scoped, revocable, RBAC-bound service accounts let a CISO approve system-to-system access without approving broad platform access.
Operations leadership
Existing internal tools call Lunnoa workflows directly, lowering the change-management cost of a rollout.
Product and OEM partners
A documented, versioned, workspace-scoped contract lets a partner white-label Lunnoa inside their own product.
Regulated financial institutions
Self-hosted deployment, auditable machine credentials, and a curated contract tend to satisfy architecture and security review.
Rollout
Not yet marked complete. Treat the headless platform as UAT-only until this list has been run end to end.
Next