SNA

Overview

HTTP routes, WebSocket protocol, event types.

This section is the on-the-wire reference. For the why behind any of these shapes, jump to Concepts. If you are comparing SNA's HTTP/WebSocket API with ACP, see SNA and ACP.

Source of truth

The server's Hono app is built from @hono/zod-openapi route definitions. The running server publishes its own OpenAPI 3.1 spec that's generated from those same Zod schemas, so the wire shapes you see here, the SDK types, and the live spec can't drift.

URLPurpose
GET /openapi.jsonRaw spec JSON
GET /docsSwagger UI
GET /specPlain text spec

Authentication

All runtime HTTP routes except GET /health require Authorization: Bearer <authToken>. The same token protects SSE streams and WebSocket upgrades. SDK launchers return it as handle.connection.authToken, and clients should pass handle.connection through intact.

The OpenAPI document declares global bearerAuth, clears security on /health, and lists 401/403 responses on protected routes.

When in doubt, hit the live server: it's always more authoritative than this page.

On this page