# API Contract Draft

## Initial APIs

- `POST /api/v1/baron-safe/devices/register`
- `POST /api/v1/baron-safe/devices/push-token`
- `DELETE /api/v1/baron-safe/devices/{deviceId}`
- `GET /api/v1/baron-safe/sessions`
- `GET /api/v1/baron-safe/sessions/{sessionId}`
- `POST /api/v1/baron-safe/sessions/{sessionId}/block`
- `GET /api/v1/baron-safe/linked-apps`
- `POST /api/v1/baron-safe/linked-apps/{clientId}/block`

## Future High-Risk Approval APIs

- `POST /api/v1/auth/baron-safe/login/init`
- `GET /api/v1/auth/baron-safe/requests/{authReqId}`
- `POST /api/v1/auth/baron-safe/requests/{authReqId}/decision`
- `POST /api/v1/auth/baron-safe/login/poll`