Cloud Endpoints

Connected endpoints are available in hosted Rustume Cloud and when an open-source operator enables Cloud mode with PostgreSQL, WorkOS, and a session secret. See Environment Variables.

Authentication

Method	Path	Auth	Description
GET	/auth/login	None	Redirect to WorkOS AuthKit
GET	/auth/callback	OAuth state	Exchange code and establish session
POST	/auth/logout	Cookie when present	Delete session and clear cookie
GET	/auth/me	Cookie	Return the authenticated account

Resume storage

Method	Path	Description
GET	/api/resumes	List authenticated user’s summaries
POST	/api/resumes	Create a resume
GET	/api/resumes/{id}	Fetch owned resume data
PUT	/api/resumes/{id}	Update title and/or resume data
DELETE	/api/resumes/{id}	Delete an owned resume
POST	/api/resumes/import	Import locally stored resumes
GET	/api/resumes/export	Bulk JSON export (max 50 resumes)
GET	/api/resumes/export/pdf	Bulk PDF export as ZIP (max 50 resumes)

Export endpoints enforce a resume-count cap and route-specific rate limits:

JSON export uses the resume CRUD limit group; PDF export uses the PDF limit group (same as POST /api/render/pdf). See Rate Limits.

Connected workflows

The connected API also backs synchronization, public pages, version history, and scoped API keys. Consult the generated OpenAPI document for exact route bodies and responses in the deployed release.

These workflows are not feature entitlements tied to a hosted subscription. Operators running the open-source connected application can expose the same functional API surface.

Operational endpoints

Method	Path	Requirement	Description
GET	/health	None	Includes persistence checks when connected mode is configured
GET	/metrics	Bearer METRICS_TOKEN	Prometheus exposition