Atlas has four APIs. Each has a rules page and a generated reference.
| API | Caller | Rules | Reference |
|---|---|---|---|
| Atlas tenant API | Tenants, Central, and regional services | Tenant API | Atlas API |
| Metal control API | The Atlas app | Metal controller contract | Metal API |
| HTTP proxy control API | Central and the Atlas app | Control daemon | Proxy API |
| WireGuard gateway API | Central | WireGuard gateway | WireGuard gateway API |
Start with signing keys and tokens to see how Central and Atlas share public keys while each service keeps its own permissions. The security model lists other control boundaries. VM state updates explains messages Atlas sends to Central. API clients explains generated Python clients.