> ## Documentation index > Fetch the complete documentation index at: https://rolter-ai-rolter.docs7.io/llms.txt > Ask it with GET https://rolter-ai-rolter.docs7.io/ask?q=. Short keywords rank best. > Use these to discover all available pages before exploring further. # Specifications and Compatibility: What Rolter Implements > Every external API, protocol and wire format Rolter implements, translates or forwards, with the revision reviewed, how much of it Rolter honours, and the tests that prove it. "OpenAI-compatible" and "SCIM 2.0" are claims, and a claim is only useful when you can check it. This page lists every external specification Rolter implements, translates, emits, parses or forwards, and every provider kind it can reach, with: - the **official source** and the **revision** reviewed — a dated version, a release, an RFC, or for a living document the date it was last read; - the **conformance level**: how much of the specification Rolter actually honours; - what is **supported**, what is **omitted**, and where Rolter **deviates** on purpose; - the **tests** that demonstrate the claim. The tables below are generated from the registry [`crates/rolter-core/specifications.toml`](https://github.com/rolter-ai/rolter/blob/master/crates/rolter-core/specifications.toml), the one place a reviewed version or URL is written down. The same data is in the gateway's and the control plane's `GET /openapi.json`: each operation a specification governs carries a standard `externalDocs` link plus three extensions, `x-rolter-spec-refs` (the registry ids), `x-rolter-conformance` and `x-rolter-reviewed-at`. Rolter never adds a field to a vendor's request or response payload. ## Conformance levels | Level | Meaning | | -------------------- | ------------------------------------------------------------------------------------------------------------------------------ | | `native-passthrough` | The vendor's wire format, forwarded or served unchanged. Rolter reads the fields it needs (`model`, `stream`, `usage`). | | `translation-subset` | Rolter rewrites between dialects. Only what the record lists is translated; a part with no equivalent fails the request. | | `transport-only` | Bytes are relayed. Rolter neither validates the payload nor negotiates a version, so the two ends must agree between them. | | `extension` | The vendor's shape plus Rolter's own additions. | | `partial` | Some of the specification, as listed. | | `provider-profile` | A provider's base URL, credential header and path over an OpenAI-shaped transport. Proves the profile, not full compatibility. | ## Versions - **OpenAI** is recorded as REST `v1`. That API evolves by backward-compatible additions and gives its type system no finer version, so Rolter records a review date rather than inventing one. Rolter does not consume OpenAI's published OpenAPI artifact, so no commit of it is pinned. - **Anthropic** is recorded with its dated `anthropic-version`. A request that states none is sent with `[compatibility] anthropic_version`, which is the recorded version when no value is stored or configured; a client's own `anthropic-version` always wins. The health probes and the provider connection test send the recorded version, not your `[compatibility]` pin: a probe asks whether the API answers and accepts the key, which no dated version changes. See [Compatibility](/configuration/compatibility). - **MCP** is `partial`: the gateway applies your organization's tool groups to every JSON-RPC call and answers an upstream `insufficient_scope` with a step-up challenge, but it relays `MCP-Protocol-Version` without negotiating it, so the recorded version is `forwarded`. The MCP OAuth client is recorded against the dated revision that carries every requirement it implements. - **OpenTelemetry GenAI** attributes are pinned to the semantic-conventions release they were audited against, and the rolter-local values are listed as deviations. OTLP is recorded by its protocol version, separately from the SDK crates that implement it. ## Registry {/* spec-registry:begin — generated by `just gen-specs`, do not edit */} ### AI APIs | Specification | Revision | Conformance | Reviewed | Endpoints | | --------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- | ------------------ | ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [OpenAI Chat Completions](https://developers.openai.com/api/reference/resources/chat/subresources/completions/methods/create) (`openai-chat-completions`) | v1 | native-passthrough | 2026-10-27 | `POST /v1/chat/completions` | | [OpenAI Completions (legacy)](https://developers.openai.com/api/reference/resources/completions) (`openai-completions`) | v1 | native-passthrough | 2026-10-27 | `POST /v1/completions` | | [OpenAI Responses and its lifecycle methods](https://developers.openai.com/api/reference/resources/responses) (`openai-responses`) | v1 | partial | 2026-10-27 | `POST /v1/responses`
`GET /v1/responses/{response_id}`
`DELETE /v1/responses/{response_id}`
`POST /v1/responses/{response_id}/cancel`
`GET /v1/responses/{response_id}/input_items`
`POST /v1/responses/{response_id}/compact`
`GET /v1/responses/{response_id}/input_tokens` | | [OpenAI Embeddings](https://developers.openai.com/api/reference/resources/embeddings) (`openai-embeddings`) | v1 | native-passthrough | 2026-10-27 | `POST /v1/embeddings` | | [OpenAI Models (list)](https://developers.openai.com/api/reference/resources/models) (`openai-models`) | v1 | extension | 2026-10-27 | `GET /v1/models` | | [OpenAI Images (generations)](https://developers.openai.com/api/reference/resources/images) (`openai-images`) | v1 | native-passthrough | 2026-10-27 | `POST /v1/images/generations` | | [OpenAI Audio (speech, transcriptions, translations)](https://developers.openai.com/api/reference/resources/audio) (`openai-audio`) | v1 | native-passthrough | 2026-10-27 | `POST /v1/audio/speech`
`POST /v1/audio/transcriptions`
`POST /v1/audio/translations` | | [OpenAI Realtime (WebSocket)](https://developers.openai.com/api/reference/resources/realtime) (`openai-realtime`) | v1 | partial | 2026-10-27 | `GET /v1/realtime` | | [OpenAI error object](https://developers.openai.com/api/docs/guides/error-codes) (`openai-errors`) | v1 | partial | 2026-10-27 | — | | [Anthropic Messages API](https://platform.claude.com/docs/en/api/messages) (`anthropic-messages`) | 2023-06-01 | native-passthrough | 2026-10-27 | `POST /v1/messages` | | [Gemini API OpenAI compatibility](https://ai.google.dev/gemini-api/docs/openai) (`gemini-openai-compat`) | v1beta | native-passthrough | 2026-10-27 | — | | [Gemini generateContent and streamGenerateContent](https://ai.google.dev/api/generate-content) (`gemini-generate-content`) | v1beta | translation-subset | 2026-10-27 | — | | [Gemini Interactions API](https://ai.google.dev/api/interactions-api) (`gemini-interactions`) | v1beta | translation-subset | 2026-10-27 | — | | [Rerank (Cohere v1 and Jina request shape)](https://docs.cohere.com/v1/reference/rerank) (`rerank`) | v1 | transport-only | 2026-10-27 | `POST /v1/rerank` | | [Infinity embeddings and rerank server](https://michaelfeil.eu/infinity/latest/) (`infinity`) | living (no revision) | translation-subset | 2026-10-27 | — | | [Text Embeddings Inference](https://huggingface.co/docs/text-embeddings-inference/index) (`hf-tei`) | living (no revision) | native-passthrough | 2026-10-27 | — | | [System One decision API](https://docs.typesafe.ai/) (`system-one`) | living (no revision) | native-passthrough | 2026-10-27 | `POST /v1/systemone` | #### OpenAI Chat Completions `openai-chat-completions` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/chat/subresources/completions/methods/create) - **Supported:** request and response bodies are forwarded unchanged to an OpenAI-shaped upstream; the gateway reads `model`, `stream`, `messages` and `usage` - **Supported:** `chat.completion.chunk` SSE frames, forwarded incrementally - **Supported:** translation to Anthropic Messages and Gemini (see the translation records) - **Omitted:** no request validation beyond `model`: unknown fields reach the upstream, which judges them - **Omitted:** the served OpenAPI schema names only the fields rolter reads, not the full vendor type - **Deviations:** a `provider-slug/model` name pins a provider and is rewritten to the upstream model before forwarding - **Deviations:** guardrails, plugins and the PII sanitizer a route configures may refuse or rewrite a request or response; with none configured the bodies pass unchanged - **Evidence:** `crates/rolter-gateway/tests/integration.rs::non_streaming_request_proxies_upstream_body`
`crates/rolter-gateway/tests/integration.rs::streaming_request_passes_through_sse`
`crates/rolter-gateway/tests/integration.rs::output_guardrail_masks_a_non_streaming_completion`
`crates/rolter-gateway/tests/integration.rs::pre_upstream_plugin_transforms_the_request_body` #### OpenAI Completions (legacy) `openai-completions` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/completions) - **Supported:** request and response bodies forwarded unchanged to an OpenAI-shaped upstream - **Omitted:** no translation to Anthropic or Gemini: a legacy completion reaches only an OpenAI-shaped upstream - **Evidence:** `crates/rolter-gateway/tests/integration.rs::fake_llm_chat_completions_without_any_config` #### OpenAI Responses and its lifecycle methods `openai-responses` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/responses) - **Supported:** create: native passthrough to an OpenAI upstream, streaming included - **Supported:** create: translated to Chat Completions, Anthropic Messages or Gemini when the route's target speaks one of those - **Supported:** retrieve, delete, cancel and input_items: forwarded to the provider that created the response, scoped to the tenant that created it - **Omitted:** `compact` and `input_tokens` are routed but answer 501: rolter does not implement them - **Omitted:** lifecycle methods on a translated response answer 501: there is no stored upstream response to address - **Deviations:** a response id is resolved through rolter's own registry, so another tenant's id reads as not found (ADR-0016) - **Evidence:** `crates/rolter-gateway/tests/integration.rs::responses_passthrough_preserves_body_and_sse_events`
`crates/rolter-gateway/tests/integration.rs::responses_lifecycle_operations_are_uniformly_unsupported`
`crates/rolter-gateway/tests/integration.rs::native_responses_lifecycle_is_tenant_scoped_and_pinned` #### OpenAI Embeddings `openai-embeddings` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/embeddings) - **Supported:** request and response bodies forwarded unchanged to an OpenAI-shaped upstream; the gateway reads `model`, `encoding_format` and `usage` - **Evidence:** `crates/rolter-gateway/tests/integration.rs::builtin_fake_llm_serves_embeddings`
`crates/rolter-gateway/tests/tei.rs` #### OpenAI Models (list) `openai-models` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/models) - **Supported:** the OpenAI list shape (`object: "list"`, `data[].id`), answered by the gateway itself rather than forwarded - **Deviations:** entries name rolter routes and `provider-slug/model` ids, and carry rolter's catalogue metadata beside the OpenAI fields - **Evidence:** `crates/rolter-gateway/tests/integration.rs::models_endpoint_lists_route_ids_and_provider_slug_model_ids` #### OpenAI Images (generations) `openai-images` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/images) - **Supported:** request and response bodies forwarded unchanged to an OpenAI-shaped upstream - **Omitted:** image edits and variations are not routed - **Evidence:** `crates/rolter-gateway/tests/integration.rs::builtin_fake_llm_serves_images` #### OpenAI Audio (speech, transcriptions, translations) `openai-audio` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/audio) - **Supported:** speech: JSON request forwarded, binary audio streamed back - **Supported:** transcriptions and translations: the multipart body is forwarded verbatim; the gateway reads only the `model` field - **Evidence:** `crates/rolter-gateway/tests/integration.rs::builtin_fake_llm_serves_audio_speech`
`crates/rolter-gateway/tests/integration.rs::builtin_fake_llm_serves_audio_transcriptions`
`crates/rolter-gateway/tests/integration.rs::audio_translations_rejects_non_multipart` #### OpenAI Realtime (WebSocket) `openai-realtime` · OpenAI · [primary source](https://developers.openai.com/api/reference/resources/realtime) - **Supported:** the WebSocket upgrade is admitted, the `model` query parameter rewritten, and frames otherwise relayed both ways unchanged - **Supported:** a client's `openai-beta` header is forwarded to the upstream - **Supported:** `response.created` and `response.done` server events are read for metering - **Supported:** when the route configures guardrails, webhooks or plugins, text-bearing client and server events are checked: a client event may be refused or redacted, a server delta withheld and its response cancelled - **Omitted:** no validation against the Realtime event schema: an event the content policy does not read is relayed whatever its type - **Omitted:** WebRTC and SIP session setup are not served - **Evidence:** `crates/rolter-gateway/tests/integration.rs::realtime_websocket_rewrites_model_and_relays_frames_with_upstream_auth`
`crates/rolter-gateway/tests/realtime_metering.rs`
`crates/rolter-gateway/tests/realtime_guardrails.rs` #### OpenAI error object `openai-errors` · OpenAI · [primary source](https://developers.openai.com/api/docs/guides/error-codes) - **Supported:** errors the gateway raises itself are `{"error": {"message", "type", "code", "param"}}` - **Omitted:** an upstream's own error body is relayed unchanged - **Deviations:** `code` carries rolter's own stable codes for refusals the vendor API has no name for - **Evidence:** `crates/rolter-gateway/tests/integration.rs::retry_policy_distinguishes_client_and_transient_upstream_errors` #### Anthropic Messages API `anthropic-messages` · Anthropic · [primary source](https://platform.claude.com/docs/en/api/messages) - **Supported:** request and response bodies forwarded unchanged to an Anthropic upstream, streaming included - **Supported:** the client's `anthropic-version` and `anthropic-*` headers reach an Anthropic upstream only - **Supported:** translation to OpenAI Chat Completions and Gemini (see the translation records) - **Deviations:** a request with no `anthropic-version` is sent with `[compatibility] anthropic_version`; when no value is configured or stored, that is this record's version (a database-backed deployment reads the stored compatibility policy, whose column default is seeded by a migration) - **Deviations:** guardrails, plugins and the PII sanitizer a route configures may refuse or rewrite a request or response; with none configured the bodies pass unchanged - **Deviations:** health probes and the connection test always send this record's version, not the operator's `[compatibility]` pin: a probe asks whether the API answers and accepts the key, which no dated version changes - **Evidence:** `crates/rolter-gateway/tests/integration.rs::anthropic_multimodal_content_is_forwarded_byte_for_byte`
`crates/rolter-proxy/src/lib.rs::anthropic_headers_do_not_leak_to_a_non_anthropic_upstream`
`crates/rolter-core/src/spec_registry.rs::the_anthropic_version_has_one_source` #### Gemini API OpenAI compatibility `gemini-openai-compat` · Google · [primary source](https://ai.google.dev/gemini-api/docs/openai) - **Supported:** OpenAI-shaped requests forwarded to `{api_base}/chat/completions` with a bearer key - **Evidence:** `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` #### Gemini generateContent and streamGenerateContent `gemini-generate-content` · Google · [primary source](https://ai.google.dev/api/generate-content) - **Supported:** text, image and tool parts translated from OpenAI Chat, Anthropic Messages and Responses requests - **Supported:** `streamGenerateContent?alt=sse` frames translated back incrementally - **Omitted:** a content part with no Gemini equivalent fails the request rather than being dropped (ADR-0014) - **Evidence:** `crates/rolter-proxy/src/translation.rs::gemini_native_resolves_for_openai_client`
`crates/rolter-proxy/src/translation.rs::unknown_content_parts_fail_closed_on_every_gemini_pair`
`crates/rolter-gateway/tests/integration.rs::unsupported_content_parts_never_reach_a_gemini_upstream` #### Gemini Interactions API `gemini-interactions` · Google · [primary source](https://ai.google.dev/api/interactions-api) - **Supported:** OpenAI Chat, Anthropic Messages and Responses requests translated onto `POST {api_base}/interactions` and back - **Omitted:** only the create call is served; endpoints the Interactions API cannot answer fail closed - **Evidence:** `crates/rolter-proxy/src/translation.rs::gemini_interactions_resolves_for_chat_dialects_and_targets_one_endpoint`
`crates/rolter-proxy/src/translation.rs::gemini_interactions_fails_closed_for_endpoints_it_cannot_serve`
`crates/rolter-proxy/src/translation.rs::openai_request_becomes_an_interactions_create_body` #### Rerank (Cohere v1 and Jina request shape) `rerank` · Cohere / Jina AI · [primary source](https://docs.cohere.com/v1/reference/rerank) - **Supported:** the body is forwarded unchanged to the route's upstream; the gateway reads only `model` - **Supported:** the built-in `fake-llm` answers in the Cohere v1 / Jina shape - **Omitted:** no Cohere v2 claim: a v2 body passes through to an upstream that accepts it, but no fixture covers one - **Evidence:** `crates/rolter-gateway/tests/integration.rs::builtin_fake_llm_serves_rerank` #### Infinity embeddings and rerank server `infinity` · michaelfeil/infinity · [primary source](https://michaelfeil.eu/infinity/latest/) - **Supported:** embeddings: OpenAI's own shape, forwarded unchanged - **Supported:** rerank: `{"text": ...}` documents flattened on the way up and bare-string documents wrapped on the way back - **Supported:** every other endpoint refused with `400 unsupported_endpoint` before the upstream on a route that reaches only embedding servers - **Evidence:** `crates/rolter-proxy/src/infinity.rs::documents_come_back_in_the_cohere_shape`
`crates/rolter-gateway/tests/infinity.rs`
`crates/rolter-gateway/tests/embedding_only.rs` #### Text Embeddings Inference `hf-tei` · Hugging Face · [primary source](https://huggingface.co/docs/text-embeddings-inference/index) - **Supported:** the OpenAI-compatible `/v1/embeddings` route, and `/health` as the liveness probe - **Supported:** every other endpoint, `/v1/rerank` included (TEI has no rerank mapping), refused with `400 unsupported_endpoint` before the upstream on a route that reaches only embedding servers, none of them Infinity - **Evidence:** `crates/rolter-gateway/tests/tei.rs`
`crates/rolter-gateway/tests/embedding_only.rs` #### System One decision API `system-one` · TypeSafe · [primary source](https://docs.typesafe.ai/) - **Supported:** request and response forwarded unchanged; the gateway reads `model` and `usage` (ADR-0035) - **Evidence:** `crates/rolter-gateway/tests/system_one.rs` ### Translations | Specification | Revision | Conformance | Reviewed | Endpoints | | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------- | ------------------ | ---------- | --------- | | [OpenAI Chat Completions ⇄ Anthropic Messages](https://platform.claude.com/docs/en/api/messages) (`translation-openai-anthropic`) | living (no revision) | translation-subset | 2026-10-27 | — | | [OpenAI Responses → Chat Completions, Anthropic Messages, Gemini](https://developers.openai.com/api/reference/resources/responses/methods/create) (`translation-responses`) | living (no revision) | translation-subset | 2026-10-27 | — | | [OpenAI / Anthropic / Responses → Gemini generateContent and Interactions](https://ai.google.dev/api/generate-content) (`translation-gemini`) | living (no revision) | translation-subset | 2026-10-27 | — | #### OpenAI Chat Completions ⇄ Anthropic Messages `translation-openai-anthropic` · rolter · [primary source](https://platform.claude.com/docs/en/api/messages) - **Supported:** messages, system and developer instructions, images, documents, tools and tool results, in both directions - **Supported:** SSE translated incrementally in both directions - **Supported:** `max_tokens` injected from `[compatibility] default_max_tokens` when an OpenAI request sets none - **Supported:** Anthropic `tool_choice.disable_parallel_tool_use: true` carried as Chat `parallel_tool_calls: false` on a request with tools (#3325) - **Omitted:** fields with no counterpart in the target dialect are dropped, never forwarded - **Deviations:** an OpenAI `temperature` above Anthropic's maximum of 1 is sent as 1 and reported as `temperature=clamped` (#3324) - **Evidence:** `crates/rolter-proxy/src/translation.rs::openai_multimodal_and_tools_become_anthropic_blocks`
`crates/rolter-proxy/src/translation.rs::chat_to_anthropic_clamps_a_temperature_above_one`
`crates/rolter-proxy/src/translation.rs::anthropic_disable_parallel_tool_use_becomes_chat_parallel_tool_calls`
`crates/rolter-gateway/tests/integration.rs::a_chat_temperature_above_one_is_clamped_for_an_anthropic_upstream`
`crates/rolter-proxy/src/translation.rs::anthropic_response_becomes_openai_response`
`crates/rolter-proxy/src/translation.rs::anthropic_sse_translates_across_chunk_boundaries`
`crates/rolter-gateway/tests/integration.rs::cross_protocol_sse_is_translated_incrementally_both_ways` #### OpenAI Responses → Chat Completions, Anthropic Messages, Gemini `translation-responses` · rolter · [primary source](https://developers.openai.com/api/reference/resources/responses/methods/create) - **Supported:** input items, instructions, tools and multimodal input; the response object and its SSE events rebuilt from the target's (ADR-0015) - **Omitted:** stored-response features (`previous_response_id`, background mode) have no translated equivalent - **Evidence:** `crates/rolter-proxy/src/translation.rs::responses_request_becomes_chat_with_tools_and_multimodal_input`
`crates/rolter-proxy/src/translation.rs::chat_sse_becomes_responses_sse`
`crates/rolter-gateway/tests/integration.rs::responses_translates_to_anthropic_messages` #### OpenAI / Anthropic / Responses → Gemini generateContent and Interactions `translation-gemini` · rolter · [primary source](https://ai.google.dev/api/generate-content) - **Supported:** see `gemini-generate-content` and `gemini-interactions` - **Omitted:** a content part with no Gemini equivalent fails the request (ADR-0014) - **Evidence:** `crates/rolter-proxy/src/translation.rs::unknown_content_parts_fail_closed_on_every_gemini_pair` ### Wire formats | Specification | Revision | Conformance | Reviewed | Endpoints | | ------------------------------------------------------------------------------------------------------------------ | -------------------- | ------------------ | ---------- | ---------------------------------------------------------------------------------------------------------- | | [Server-sent events](https://html.spec.whatwg.org/multipage/server-sent-events.html) (`sse`) | living (no revision) | partial | 2026-10-27 | `POST /v1/chat/completions`
`POST /v1/completions`
`POST /v1/responses`
`POST /v1/messages` | | [The WebSocket Protocol](https://www.rfc-editor.org/rfc/rfc6455) (`websocket`) | RFC 6455 | native-passthrough | 2026-10-27 | `GET /v1/realtime` | | [Returning Values from Forms: multipart/form-data](https://www.rfc-editor.org/rfc/rfc7578) (`multipart-form-data`) | RFC 7578 | partial | 2026-10-27 | `POST /v1/audio/transcriptions`
`POST /v1/audio/translations` | | [Date and Time on the Internet: Timestamps](https://www.rfc-editor.org/rfc/rfc3339) (`rfc3339`) | RFC 3339 | partial | 2026-10-27 | — | | [Uniform Resource Identifier (URI): Generic Syntax](https://www.rfc-editor.org/rfc/rfc3986) (`uri`) | RFC 3986 | partial | 2026-10-27 | — | | [The Deprecation HTTP Response Header Field](https://www.rfc-editor.org/rfc/rfc9745) (`deprecation-header`) | RFC 9745 | native-passthrough | 2026-10-27 | — | | [The Sunset HTTP Header Field](https://www.rfc-editor.org/rfc/rfc8594) (`sunset-header`) | RFC 8594 | native-passthrough | 2026-10-27 | — | | [JSON-RPC 2.0](https://www.jsonrpc.org/specification) (`json-rpc`) | 2.0.0 | partial | 2026-10-27 | `POST /mcp/{server}`
`POST /mcp/{server}/{path}` | #### Server-sent events `sse` · WHATWG · [primary source](https://html.spec.whatwg.org/multipage/server-sent-events.html) - **Supported:** `event:` and `data:` fields, multi-line data and frames split across chunks, parsed when a stream is translated - **Omitted:** `id:` and `retry:` are relayed but never interpreted; no reconnection - **Evidence:** `crates/rolter-proxy/src/translation.rs::anthropic_sse_translates_across_chunk_boundaries`
`crates/rolter-gateway/tests/integration.rs::streaming_response_is_forwarded_incrementally` #### The WebSocket Protocol `websocket` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc6455) - **Supported:** upgrade on both sides of the relay, text and binary frames, close codes - **Evidence:** `crates/rolter-gateway/tests/integration.rs::realtime_websocket_rejects_missing_auth_disallowed_and_unknown_models` #### Returning Values from Forms: multipart/form-data `multipart-form-data` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc7578) - **Supported:** quoted and unquoted boundaries; one named text field read from the buffered body - **Omitted:** the body is never re-encoded: it is forwarded byte for byte - **Evidence:** `crates/rolter-gateway/src/multipart.rs::parses_boundary_variants` #### Date and Time on the Internet: Timestamps `rfc3339` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc3339) - **Supported:** timestamps the control-plane API accepts and returns are RFC 3339 with an offset (`format: date-time` in its OpenAPI document) - **Evidence:** `crates/rolter-control/src/ui_events.rs::rejects_a_ts_that_is_not_rfc_3339` #### Uniform Resource Identifier (URI): Generic Syntax `uri` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc3986) - **Supported:** percent-encoding of the unreserved set (§2.3) and scheme/host normalisation (§6.2.2) where a URI is compared - **Evidence:** `crates/rolter-control/src/mcp_oauth_discovery.rs::a_resource_uri_is_canonicalised_the_way_rfc_8707_asks` #### The Deprecation HTTP Response Header Field `deprecation-header` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc9745) - **Supported:** `Deprecation: @` on a deprecated control-plane operation - **Supported:** `Deprecation` on every `/internal/snapshot` answer served in a deprecated snapshot format (ADR-0038) - **Evidence:** `crates/rolter-control/src/deprecation.rs::headers_follow_rfc_9745_and_rfc_8594`
`crates/rolter-control/src/snapshot_negotiation.rs::a_deprecated_format_carries_the_headers_and_only_it` #### The Sunset HTTP Header Field `sunset-header` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc8594) - **Supported:** `Sunset` as an IMF-fixdate on every deprecated control-plane operation - **Supported:** `Sunset` on every `/internal/snapshot` answer served in a deprecated snapshot format (ADR-0038) - **Evidence:** `crates/rolter-control/src/deprecation.rs::headers_follow_rfc_9745_and_rfc_8594`
`crates/rolter-control/src/snapshot_negotiation.rs::a_deprecated_format_carries_the_headers_and_only_it` #### JSON-RPC 2.0 `json-rpc` · JSON-RPC Working Group · [primary source](https://www.jsonrpc.org/specification) - **Supported:** every POST body is parsed as a JSON-RPC request, notification or batch to apply the organization's tool groups; a `tools/call` outside them is refused - **Supported:** `method`, `result` and `error` are read from an MCP exchange to log tool calls - **Omitted:** an allowed message is forwarded unchanged: rolter validates no other part of it - **Deviations:** a body that cannot be read as JSON-RPC is refused with 400 `mcp_request_unreadable` unless the organization's failure policy lets it through - **Evidence:** `crates/rolter-gateway/src/mcp_policy.rs::an_escaped_method_name_does_not_get_around_the_policy`
`crates/rolter-gateway/src/mcp_policy.rs::a_batch_is_refused_as_a_whole_naming_every_refused_call`
`crates/rolter-gateway/tests/integration.rs::mcp_proxy_records_a_tool_call_with_key_and_session_owner_attribution`
`crates/rolter-gateway/tests/integration.rs::mcp_proxy_records_a_json_rpc_error_as_a_tool_error` ### Transport | Specification | Revision | Conformance | Reviewed | Endpoints | | ----------------------------------------------------------------------------------------------------------------------------------- | --------- | ----------- | ---------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [HTTP Semantics and HTTP/1.1](https://www.rfc-editor.org/rfc/rfc9110) (`http-semantics`) | RFC 9110 | partial | 2026-10-27 | — | | [MCP Streamable HTTP transport and version negotiation](https://modelcontextprotocol.io/specification/versioning) (`mcp-transport`) | forwarded | partial | 2026-10-27 | `GET /mcp/{server}`
`POST /mcp/{server}`
`DELETE /mcp/{server}`
`GET /mcp/{server}/{path}`
`POST /mcp/{server}/{path}`
`DELETE /mcp/{server}/{path}` | #### HTTP Semantics and HTTP/1.1 `http-semantics` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc9110) - **Supported:** `Connection`, every field its value nominates and the fixed hop-by-hop set (`Keep-Alive`, `Proxy-Connection`, `TE`, `Trailer`, `Transfer-Encoding`, `Upgrade` and the proxy-auth fields, RFC 9110 §7.6.1) are stripped by one shared helper before a request or response is relayed - **Evidence:** `crates/rolter-proxy/src/hop_by_hop.rs::removes_connection_and_the_fields_it_nominates`
`crates/rolter-proxy/src/hop_by_hop.rs::removes_trailer_and_the_fixed_set`
`crates/rolter-control/src/proxy.rs::the_relay_drops_nominated_and_trailer_headers_both_ways`
`crates/rolter-gateway/src/mcp_proxy.rs::the_relay_drops_nominated_and_trailer_headers`
`crates/rolter-gateway/src/mcp_proxy.rs::proxy_replaces_client_auth_and_preserves_path_query_and_body` #### MCP Streamable HTTP transport and version negotiation `mcp-transport` · Model Context Protocol · [primary source](https://modelcontextprotocol.io/specification/versioning) - **Supported:** requests, SSE replies and `Mcp-Session-Id` relayed between client and server; the gateway authenticates the client and presents its own credential upstream - **Supported:** a POST naming a tool outside the organization's enabled tool groups is refused with 403 `mcp_tool_denied` before anything is forwarded (see `json-rpc`) - **Supported:** an upstream 403 whose challenge says `insufficient_scope` is answered with 403 `mcp_insufficient_scope` and a rebuilt `WWW-Authenticate` challenge - **Omitted:** no protocol-version negotiation: `MCP-Protocol-Version` is relayed, never read - **Omitted:** no validation of what an allowed message contains, and none of the server's replies - **Omitted:** the deprecated HTTP+SSE transport is relayed like any other request, not implemented - **Evidence:** `crates/rolter-gateway/src/mcp_proxy.rs::proxy_replaces_client_auth_and_preserves_path_query_and_body`
`crates/rolter-gateway/src/mcp_policy.rs::a_governed_server_serves_only_the_tools_its_groups_list`
`crates/rolter-gateway/src/mcp_proxy.rs::insufficient_scope_from_an_oauth_server_is_the_step_up_answer`
`crates/rolter-gateway/tests/integration.rs::mcp_proxy_binds_virtual_key_owner_to_server_scopes_and_bearer` ### Identity | Specification | Revision | Conformance | Reviewed | Endpoints | | ----------------------------------------------------------------------------------------------------------------------- | ------------------------------ | ------------------ | ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [MCP authorization](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization) (`mcp-authorization`) | 2026-07-28 | partial | 2026-10-28 | `POST /api/v1/mcp-servers/{id}/oauth/authorize` | | [The OAuth 2.0 Authorization Framework](https://www.rfc-editor.org/rfc/rfc6749) (`oauth2`) | RFC 6749 | partial | 2026-10-27 | — | | [OAuth 2.0 Bearer Token Usage](https://www.rfc-editor.org/rfc/rfc6750) (`oauth2-bearer`) | RFC 6750 | partial | 2026-10-27 | — | | [Proof Key for Code Exchange](https://www.rfc-editor.org/rfc/rfc7636) (`pkce`) | RFC 7636 | partial | 2026-10-27 | — | | [OAuth 2.0 Token Exchange](https://www.rfc-editor.org/rfc/rfc8693) (`oauth2-token-exchange`) | RFC 8693 | partial | 2026-10-27 | — | | [OAuth 2.0 Authorization Server Metadata](https://www.rfc-editor.org/rfc/rfc8414) (`oauth2-as-metadata`) | RFC 8414 | partial | 2026-10-27 | — | | [Resource Indicators for OAuth 2.0](https://www.rfc-editor.org/rfc/rfc8707) (`oauth2-resource-indicators`) | RFC 8707 | partial | 2026-10-27 | — | | [OAuth 2.0 Authorization Server Issuer Identification](https://www.rfc-editor.org/rfc/rfc9207) (`oauth2-iss`) | RFC 9207 | native-passthrough | 2026-10-27 | — | | [OAuth 2.0 Protected Resource Metadata](https://www.rfc-editor.org/rfc/rfc9728) (`oauth2-protected-resource-metadata`) | RFC 9728 | partial | 2026-10-27 | — | | [OpenID Connect Core 1.0](https://openid.net/specs/openid-connect-core-1_0.html) (`oidc-core`) | 1.0 incorporating errata set 2 | partial | 2026-10-27 | `GET /auth/sso/{slug}/start`
`GET /auth/sso/{slug}/callback` | | [OpenID Connect Discovery 1.0](https://openid.net/specs/openid-connect-discovery-1_0.html) (`oidc-discovery`) | 1.0 incorporating errata set 2 | partial | 2026-10-27 | — | | [SCIM 2.0 core schema and protocol](https://www.rfc-editor.org/rfc/rfc7644) (`scim`) | RFC 7643 / RFC 7644 | partial | 2026-10-27 | `GET /scim/v2/Users`
`POST /scim/v2/Users`
`GET /scim/v2/Users/{id}`
`PUT /scim/v2/Users/{id}`
`PATCH /scim/v2/Users/{id}`
`DELETE /scim/v2/Users/{id}`
`GET /scim/v2/Groups`
`POST /scim/v2/Groups`
`GET /scim/v2/Groups/{id}`
`PUT /scim/v2/Groups/{id}`
`PATCH /scim/v2/Groups/{id}`
`DELETE /scim/v2/Groups/{id}` | | [LDAP protocol and string representation of search filters](https://www.rfc-editor.org/rfc/rfc4511) (`ldap`) | RFC 4511 / RFC 4515 | partial | 2026-10-27 | `POST /api/v1/auth/login` | | [TOTP: Time-Based One-Time Password Algorithm](https://www.rfc-editor.org/rfc/rfc6238) (`totp`) | RFC 6238 | partial | 2026-10-27 | — | #### MCP authorization `mcp-authorization` · Model Context Protocol · [primary source](https://modelcontextprotocol.io/specification/2026-07-28/basic/authorization) - **Supported:** the client-side MUSTs: RFC 9728 discovery, RFC 8707 resource indicators, RFC 9207 `iss` validation, PKCE - **Supported:** scope selection from the challenge's `scope` and the metadata's `scopes_supported`, and step-up: a re-authorization asks for the live grant's scopes plus the ones an `insufficient_scope` refusal named (#1417) - **Omitted:** dynamic client registration and client ID metadata documents: the operator registers the client by hand - **Evidence:** `crates/rolter-control/src/mcp_oauth_discovery.rs::the_rfc_9207_table_is_implemented_row_by_row`
`crates/rolter-control/src/mcp_oauth_flow.rs::scopes_are_chosen_by_the_documented_precedence`
`crates/rolter-control/src/mcp_oauth_discovery.rs::the_challenge_parameter_is_read_off_a_www_authenticate_header`
`crates/rolter-control/src/mcp_oauth_discovery.rs::a_resource_uri_is_canonicalised_the_way_rfc_8707_asks` #### The OAuth 2.0 Authorization Framework `oauth2` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc6749) - **Supported:** authorization-code and refresh-token grants, as a client - **Omitted:** rolter is never an authorization server - **Evidence:** `crates/rolter-control/src/mcp_oauth_flow.rs::a_refusal_and_a_missing_kek_stay_400s_with_their_own_words` #### OAuth 2.0 Bearer Token Usage `oauth2-bearer` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc6750) - **Supported:** `Authorization: Bearer` for virtual keys, SCIM tokens and the credential presented to an MCP server - **Omitted:** no `access_token` form or query parameter - **Evidence:** `crates/rolter-gateway/src/mcp_proxy.rs::proxy_replaces_client_auth_and_preserves_path_query_and_body` #### Proof Key for Code Exchange `pkce` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc7636) - **Supported:** `S256` only - **Omitted:** `plain` is never sent - **Evidence:** `crates/rolter-control/src/sso.rs::pkce_challenge_is_the_s256_of_the_verifier` #### OAuth 2.0 Token Exchange `oauth2-token-exchange` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc8693) - **Supported:** on-behalf-of exchange for an MCP session, as a client - **Evidence:** `crates/rolter-control/src/mcp_oauth_flow.rs::a_token_endpoint_resolving_to_a_denied_address_is_never_contacted` #### OAuth 2.0 Authorization Server Metadata `oauth2-as-metadata` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc8414) - **Supported:** `/.well-known/oauth-authorization-server` read, with the OIDC discovery path as the fallback - **Evidence:** `crates/rolter-control/src/mcp_oauth_discovery.rs::a_metadata_host_resolving_to_a_denied_address_is_never_contacted` #### Resource Indicators for OAuth 2.0 `oauth2-resource-indicators` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc8707) - **Supported:** `resource` on every authorization and token request, canonicalised once - **Evidence:** `crates/rolter-control/src/mcp_oauth_discovery.rs::a_resource_uri_is_canonicalised_the_way_rfc_8707_asks` #### OAuth 2.0 Authorization Server Issuer Identification `oauth2-iss` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc9207) - **Supported:** `iss` checked on the authorization response against the issuer the browser was sent to - **Evidence:** `crates/rolter-control/src/mcp_oauth_discovery.rs::the_rfc_9207_table_is_implemented_row_by_row` #### OAuth 2.0 Protected Resource Metadata `oauth2-protected-resource-metadata` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc9728) - **Supported:** discovery of an MCP server's authorization server - **Omitted:** rolter does not publish metadata for its own `/mcp` endpoints - **Evidence:** `crates/rolter-control/src/mcp_oauth_discovery.rs::a_metadata_host_resolving_to_a_denied_address_is_never_contacted` #### OpenID Connect Core 1.0 `oidc-core` · OpenID Foundation · [primary source](https://openid.net/specs/openid-connect-core-1_0.html) - **Supported:** authorization-code flow with PKCE, `state` and `nonce`; id token signature checked against the JWKS, with `iss`, `aud`, `exp` and `nonce` - **Omitted:** implicit and hybrid flows; `alg: none` and HMAC-signed tokens are refused - **Evidence:** `crates/rolter-control/src/sso.rs::authorize_url_carries_pkce_state_and_nonce`
`crates/rolter-control/src/sso.rs::symmetric_and_none_algorithms_are_not_accepted` #### OpenID Connect Discovery 1.0 `oidc-discovery` · OpenID Foundation · [primary source](https://openid.net/specs/openid-connect-discovery-1_0.html) - **Supported:** `/.well-known/openid-configuration` read for the authorization, token and JWKS endpoints - **Evidence:** `crates/rolter-control/src/sso.rs::a_provider_row_carries_the_uris_the_flow_uses` #### SCIM 2.0 core schema and protocol `scim` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc7644) - **Supported:** the User and Group resources; `eq` filters on `userName` and `displayName`; PATCH in the shapes IdPs send - **Omitted:** bulk, sort, `/Me`, `/ServiceProviderConfig` and filters beyond `eq`; a `password` attribute is ignored - **Evidence:** `crates/rolter-control/src/scim.rs::parses_the_user_name_filter_idps_send`
`crates/rolter-control/src/scim.rs::rejects_filters_it_cannot_honour`
`crates/rolter-control/src/scim_groups.rs::reads_members_in_every_shape_idps_send` #### LDAP protocol and string representation of search filters `ldap` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc4511) - **Supported:** sign-in: when a local password does not verify, each enabled directory of the org is tried with a two-phase simple bind (service account search, then a bind as the user) - **Supported:** every RFC 4515 special character escaped in a filter value; `ldaps://` when a directory requires TLS - **Supported:** directory groups mapped to roles through the scoped-grant model SSO and SCIM use, reconciled on every sign-in - **Omitted:** SASL binds and StartTLS upgrade of a plain `ldap://` connection - **Omitted:** the directory settings API (`/api/v1/ldap-directories`) is rolter's own and implements no LDAP operation - **Evidence:** `crates/rolter-control/src/ldap.rs::escaping_covers_every_rfc4515_special_character`
`crates/rolter-control/tests/control/ldap.rs::a_directory_user_signs_in_and_gets_the_grants_their_groups_map_to`
`crates/rolter-control/tests/control/ldap.rs::a_wrong_password_and_an_unknown_login_are_the_same_refusal` #### TOTP: Time-Based One-Time Password Algorithm `totp` · IETF · [primary source](https://www.rfc-editor.org/rfc/rfc6238) - **Supported:** HMAC-SHA1, six digits and 30-second steps; base32 (RFC 4648) secrets - **Evidence:** `crates/rolter-auth/src/totp.rs::matches_the_rfc_6238_test_vectors`
`crates/rolter-auth/src/totp.rs::base32_round_trips_and_matches_rfc_4648_vectors` ### Telemetry | Specification | Revision | Conformance | Reviewed | Endpoints | | ------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------- | ------------------ | ---------- | -------------- | | [OpenTelemetry Protocol (OTLP)](https://opentelemetry.io/docs/specs/otlp/) (`otlp`) | 1.10.0 (`ca839c51f706`) | native-passthrough | 2026-10-27 | — | | [OpenTelemetry SDK environment variables](https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/) (`otel-sdk-env`) | living (no revision) | partial | 2026-10-27 | — | | [Semantic conventions for generative AI](https://github.com/open-telemetry/semantic-conventions/tree/v1.41.0/docs/gen-ai) (`otel-genai-semconv`) | 1.41.0 (`e018fe6f9186`) | extension | 2026-10-27 | — | | [Trace Context](https://www.w3.org/TR/trace-context/) (`w3c-trace-context`) | W3C Recommendation, Level 1 | partial | 2026-10-27 | — | | [B3 propagation](https://github.com/openzipkin/b3-propagation) (`b3`) | living (no revision) | partial | 2026-10-27 | — | | [Prometheus text exposition format](https://prometheus.io/docs/instrumenting/exposition_formats/) (`prometheus-text`) | 0.0.4 | native-passthrough | 2026-10-27 | `GET /metrics` | #### OpenTelemetry Protocol (OTLP) `otlp` · OpenTelemetry · [primary source](https://opentelemetry.io/docs/specs/otlp/) - **Supported:** traces, metrics and logs over OTLP/gRPC or OTLP/HTTP - **Evidence:** `crates/rolter-gateway/src/metrics.rs::otlp_labelled_export_matches_the_prometheus_text` #### OpenTelemetry SDK environment variables `otel-sdk-env` · OpenTelemetry · [primary source](https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/) - **Supported:** `OTEL_EXPORTER_OTLP_*ENDPOINT`, `OTEL_EXPORTER_OTLP_PROTOCOL`, `OTEL_EXPORTER_OTLP_HEADERS`, `OTEL_SERVICE_NAME`, `OTEL_RESOURCE_ATTRIBUTES`, `OTEL_METRIC_EXPORT_INTERVAL` - **Evidence:** `crates/rolter-core/src/telemetry.rs::the_switch_beats_a_configured_endpoint` #### Semantic conventions for generative AI `otel-genai-semconv` · OpenTelemetry · [primary source](https://github.com/open-telemetry/semantic-conventions/tree/v1.41.0/docs/gen-ai) - **Supported:** gen_ai.operation.name - **Supported:** gen_ai.provider.name - **Supported:** gen_ai.request.model - **Supported:** gen_ai.response.model - **Supported:** gen_ai.response.finish_reasons - **Supported:** gen_ai.response.id - **Supported:** gen_ai.output.type - **Supported:** gen_ai.usage.input_tokens - **Supported:** gen_ai.usage.output_tokens - **Supported:** gen_ai.embeddings.dimension.count - **Supported:** gen_ai.request.encoding_formats - **Supported:** error.type - **Omitted:** prompt and completion content (`gen_ai.input.messages`, `gen_ai.output.messages`) is never emitted - **Deviations:** `gen_ai.system` is still emitted beside `gen_ai.provider.name`, though v1.41.0 lists it as deprecated - **Deviations:** `rerank` and `decision` are rolter-local `gen_ai.operation.name` values: the enum has no entry for either - **Deviations:** audio transcription and translation are `generate_content` with `gen_ai.output.type=text`; the audio input is not representable - **Deviations:** a Realtime session carries no GenAI operation - **Evidence:** `crates/rolter-gateway/src/genai.rs::the_attribute_registry_matches_the_spec_spellings`
`crates/rolter-gateway/src/genai.rs::the_registry_lists_every_emitted_attribute` #### Trace Context `w3c-trace-context` · W3C · [primary source](https://www.w3.org/TR/trace-context/) - **Supported:** `traceparent` parsed for the request log's trace id; `traceparent` and `tracestate` forwarded to the upstream verbatim - **Omitted:** W3C Baggage is not read or forwarded - **Evidence:** `crates/rolter-gateway/src/trace.rs::parses_w3c_traceparent`
`crates/rolter-gateway/tests/integration.rs::propagates_inbound_traceparent_to_upstream` #### B3 propagation `b3` · OpenZipkin · [primary source](https://github.com/openzipkin/b3-propagation) - **Supported:** the single `b3` header and the `x-b3-*` multi-header form, read and forwarded verbatim; `traceparent` wins when both arrive - **Evidence:** `crates/rolter-gateway/src/trace.rs::parses_b3_single_and_multi`
`crates/rolter-gateway/src/trace.rs::traceparent_wins_over_b3` #### Prometheus text exposition format `prometheus-text` · Prometheus · [primary source](https://prometheus.io/docs/instrumenting/exposition_formats/) - **Supported:** `text/plain; version=0.0.4` - **Omitted:** OpenMetrics is not served: neither its content type nor its grammar - **Evidence:** `crates/rolter-gateway/tests/integration.rs::metrics_served_on_configured_path` ### API description | Specification | Revision | Conformance | Reviewed | Endpoints | | ------------------------------------------------------------------------- | -------- | ------------------ | ---------- | ------------------- | | [OpenAPI Specification](https://spec.openapis.org/oas/v3.1.0) (`openapi`) | 3.1.0 | native-passthrough | 2026-10-27 | `GET /openapi.json` | #### OpenAPI Specification `openapi` · OpenAPI Initiative · [primary source](https://spec.openapis.org/oas/v3.1.0) - **Supported:** `info.version` is the rolter build, never an upstream vendor's version; provenance travels as `externalDocs` and `x-rolter-*` extensions - **Evidence:** `crates/rolter-gateway/tests/integration.rs::serves_openapi_document`
`crates/rolter-gateway/src/openapi.rs::every_documented_operation_carries_its_provenance` ### Provider kinds | Kind | Documentation | Auth | Primary path | Example `api_base` | Conformance | Reviewed | Evidence | | --------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- | --------------------------------- | ------------------------------------------------------------------------------------------ | ------------------ | ---------- | ----------------------------------------------------------------------------------------------------- | | `openai` | [OpenAI](https://developers.openai.com/api/reference/overview) | `authorization` | `/v1/chat/completions` | `https://api.openai.com` | native-passthrough | 2026-10-27 | `crates/rolter-gateway/tests/integration.rs::responses_passthrough_preserves_body_and_sse_events` | | `anthropic` | [Anthropic](https://platform.claude.com/docs/en/api/messages) | `x-api-key` | `/v1/messages` | `https://api.anthropic.com` | native-passthrough | 2026-10-27 | `crates/rolter-gateway/tests/integration.rs::anthropic_multimodal_content_is_forwarded_byte_for_byte` | | `openai_compatible` | [any OpenAI-compatible server (vLLM, TGI, SGLang, LM Studio)](https://developers.openai.com/api/reference/overview) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-gateway/tests/integration.rs::non_streaming_request_proxies_upstream_body` | | `ollama` | [Ollama](https://docs.ollama.com/api/openai-compatibility) | `authorization` | `/v1/chat/completions` | `http://localhost:11434` | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `ollama_cloud` | [Ollama](https://docs.ollama.com/cloud) | `authorization` | `/v1/chat/completions` | `https://ollama.com` | provider-profile | 2026-10-27 | `crates/rolter-gateway/tests/ollama_cloud.rs` | | `llama_cpp` | [ggml-org/llama.cpp](https://github.com/ggml-org/llama.cpp/blob/master/tools/server/README.md) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-gateway/tests/llama_cpp.rs` | | `openrouter` | [OpenRouter](https://openrouter.ai/docs/api/reference/overview) | `authorization` | `/v1/chat/completions` | `https://openrouter.ai/api/v1` | provider-profile | 2026-10-27 | `crates/rolter-gateway/tests/openrouter.rs` | | `tei` | [Hugging Face](https://huggingface.co/docs/text-embeddings-inference/index) | `authorization` | `/v1/embeddings` | — | native-passthrough | 2026-10-27 | `crates/rolter-gateway/tests/tei.rs` | | `azure_openai` | [Microsoft](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/api-version-lifecycle) | `api-key` | `/v1/chat/completions` | `https://RESOURCE.openai.azure.com/openai/v1` | provider-profile | 2026-10-27 | `crates/rolter-proxy/src/lib.rs::every_kind_authenticates_with_the_header_the_probes_use` | | `bedrock` | [Amazon Web Services](https://docs.aws.amazon.com/bedrock/latest/userguide/inference-chat-completions.html) — a Bedrock API key as a bearer token; SigV4 signing is not implemented | `authorization` | `/v1/chat/completions` | `https://bedrock-runtime.us-east-1.amazonaws.com/v1` | provider-profile | 2026-10-27 | `crates/rolter-proxy/src/lib.rs::the_previewed_address_is_the_one_the_forwarder_builds` | | `vertex` | [Google Cloud](https://cloud.google.com/vertex-ai/generative-ai/docs/migrate/openai/overview) — a short-lived OAuth access token as the bearer; rolter does not mint it | `authorization` | `/v1/chat/completions` | `https://aiplatform.googleapis.com/v1/projects/PROJECT/locations/global/endpoints/openapi` | provider-profile | 2026-10-27 | `crates/rolter-proxy/src/lib.rs::the_previewed_address_is_the_one_the_forwarder_builds` | | `gemini` | [Google](https://ai.google.dev/gemini-api/docs/openai) | `authorization` | `/v1/chat/completions` | `https://generativelanguage.googleapis.com/v1beta/openai` | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `gemini_native` | [Google](https://ai.google.dev/api/generate-content) | `x-goog-api-key` | `/models/{model}:generateContent` | `https://generativelanguage.googleapis.com/v1beta` | translation-subset | 2026-10-27 | `crates/rolter-gateway/tests/integration.rs::unsupported_content_parts_never_reach_a_gemini_upstream` | | `gemini_interactions` | [Google](https://ai.google.dev/api/interactions-api) | `x-goog-api-key` | `/interactions` | `https://generativelanguage.googleapis.com/v1beta` | translation-subset | 2026-10-27 | `crates/rolter-proxy/src/lib.rs::gemini_interactions_targets_the_single_interactions_endpoint` | | `mistral` | [Mistral AI](https://docs.mistral.ai/api/) | `authorization` | `/v1/chat/completions` | `https://api.mistral.ai/v1` | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `groq` | [Groq](https://console.groq.com/docs/openai) | `authorization` | `/v1/chat/completions` | `https://api.groq.com/openai/v1` | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `xai` | [xAI](https://docs.x.ai/docs/api-reference) | `authorization` | `/v1/chat/completions` | `https://api.x.ai/v1` | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `meta_llama_api` | [Meta](https://llama.developer.meta.com/docs/overview) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `cohere` | [Cohere](https://docs.cohere.com/docs/compatibility-api) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `perplexity` | [Perplexity](https://docs.perplexity.ai/api-reference/chat-completions-post) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `together` | [Together AI](https://docs.together.ai/docs/openai-api-compatibility) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `fireworks` | [Fireworks AI](https://docs.fireworks.ai/tools-sdks/openai-compatibility) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `databricks` | [Databricks](https://docs.databricks.com/aws/en/machine-learning/foundation-model-apis/) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `aleph_alpha` | [Aleph Alpha](https://docs.aleph-alpha.com/) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `nebius` | [Nebius](https://docs.nebius.com/studio/inference/api) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `ovhcloud` | [OVHcloud](https://help.ovhcloud.com/csm/en-public-cloud-ai-endpoints-getting-started?id=kb_article_view&sysparm_article=KB0065401) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `scaleway` | [Scaleway](https://www.scaleway.com/en/docs/generative-apis/) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `deepseek` | [DeepSeek](https://api-docs.deepseek.com/) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `qwen` | [Alibaba Cloud](https://www.alibabacloud.com/help/en/model-studio/compatibility-of-openai-with-dashscope) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `zhipu` | [Zhipu AI](https://docs.bigmodel.cn/cn/guide/develop/openai/introduction) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `kimi` | [Moonshot AI](https://platform.moonshot.ai/docs/api/chat) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `ernie` | [Baidu](https://cloud.baidu.com/doc/qianfan-api/s/3m7of64lb) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `doubao` | [ByteDance Volcengine](https://www.volcengine.com/docs/82379) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `hunyuan` | [Tencent Cloud](https://cloud.tencent.com/document/product/1729/111007) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `yi` | [01.AI](https://platform.lingyiwanwu.com/docs) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `minimax` | [MiniMax](https://platform.minimax.io/docs/api-reference/text-openai-api) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `baichuan` | [Baichuan AI](https://platform.baichuan-ai.com/docs/api) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `gigachat` | [Sber](https://developers.sber.ru/docs/ru/gigachat/api/overview) — GigaChat issues short-lived access tokens from an OAuth endpoint; rolter sends the configured key as the bearer and does not mint one | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `yandex_gpt` | [Yandex Cloud](https://yandex.cloud/en/docs/foundation-models/concepts/openai-compatibility) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `cloud_ru` | [Cloud.ru](https://cloud.ru/docs/foundation-models/ug/index) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `mts_ai` | [MTS AI](https://mts.ai/product/cotype/) — product page; no public API reference was found at review | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `naver` | [Naver Cloud](https://api.ncloud-docs.com/docs/en/ai-naver-clovastudio-summary) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `upstage` | [Upstage](https://console.upstage.ai/api/docs/getting-started) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `rinna` | [rinna](https://rinna.co.jp/) — company site; no public API reference was found at review | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `rakuten` | [Rakuten](https://ai.rakuten.co.jp/) — product site; no public API reference was found at review | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `sarvam` | [Sarvam AI](https://docs.sarvam.ai/api-reference-docs/chat/chat-completions) | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `krutrim` | [Ola Krutrim](https://cloud.olakrutrim.com/) — console; no public API reference was found at review | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `falcon` | [Technology Innovation Institute](https://falconllm.tii.ae/) — product site; no public API reference was found at review | `authorization` | `/v1/chat/completions` | — | provider-profile | 2026-10-27 | `crates/rolter-core/src/config.rs::every_kind_resolves_by_the_documented_rule` | | `system_one` | [TypeSafe](https://docs.typesafe.ai/) | `authorization` | `/v1/systemone` | `https://api.typesafe.ai` | native-passthrough | 2026-10-27 | `crates/rolter-gateway/tests/system_one.rs` | | `infinity` | [michaelfeil/infinity](https://michaelfeil.eu/infinity/latest/) | `authorization` | `/v1/embeddings` | — | translation-subset | 2026-10-27 | `crates/rolter-gateway/tests/infinity.rs` | {/* spec-registry:end */}