Leony by Aweb

Developer surface

Leony developer surface.

Discovery, OpenAPI, MCP metadata, auth posture, and internal contracts for the approval-gated Leony creative system.

REST discovery

Product, route, auth, governance, and MCP summary.

Open
OpenAPI reference

Machine-readable API contract for Leony discovery routes.

Open
MCP guide

Designed guide for Leony tools, resources, auth, and approval-gated execution.

Open
Developer console

Create scoped Leony keys, inspect usage, and copy MCP connection config.

Open
Auth model

Aweb-issued keys, session auth, scopes, and approval-gated execution posture.

Open
Contracts

Internal contracts, generated-client posture, and public SDK status.

Open

What is live now

Leony exposes public discovery, provider/capability posture, OpenAPI, MCP metadata, and a signed-in developer console for scoped API keys. Live creative execution is intentionally routed through Aweb authentication, provider policy, approval checks, and receipts before any render spend or publishing side effect.

Standalone routes
15
MCP tools
7
MCP resources
12

API reference

Leony follows the Nina discipline: every surface is named, scoped, and marked by its real execution status. Standalone Leony serves product discovery. Spend-bearing media execution remains delegated to Aweb V2 and Aweb MCP until Leony-specific write routes are promoted.

GET/api/leony/v1

Leony API/MCP discovery manifest for standalone product clients.

Live readPublic readStandalone Leony
Served by the standalone Leony app.
GET/api/leony/v1/capabilities

Leony creative capability and provider-domain discovery.

Live readPublic readStandalone Leony
Served by the standalone Leony app.
GET/api/leony/v1/monitoring

Leony control-plane monitoring: persistence posture, recent projects, jobs, approvals, and MCP tool calls.

Live readSession or API keyStandalone Leony
Served by the standalone Leony app.
GET/api/leony/v1/events

Authenticated Leony live event stream over SSE with Last-Event-ID replay from the Neon event ledger.

Live readSession or API keyStandalone Leony
Served by the standalone Leony app.
GET/api/leony/v1/keys

List masked Leony API keys for the signed-in Aweb account.

CredentialAweb sessionStandalone Leonyleony.keys.read
Signed-in Leony credential management.
POST/api/leony/v1/keys

Create a scoped Leony API key in the shared Aweb credential ledger. The full secret is returned once.

CredentialAweb sessionStandalone Leonyleony.keys.create
Signed-in Leony credential management.
PATCH/api/leony/v1/keys/{id}

Update a Leony API key name, scopes, or IP allowlist.

CredentialAweb sessionStandalone Leonyleony.keys.update
Signed-in Leony credential management.
DELETE/api/leony/v1/keys/{id}

Revoke a Leony API key.

CredentialAweb sessionStandalone Leonyleony.keys.revoke
Signed-in Leony credential management.
GET/api/leony/v1/keys/{id}/usage

Inspect usage logs and aggregate usage for one Leony API key.

CredentialAweb sessionStandalone Leonyleony.keys.usage
Signed-in Leony credential management.
GET/api/leony/v1/developer/access-check

Verify the current Leony session or bearer API key and return MCP connection metadata.

CredentialSession or API keyStandalone Leonyleony.access.check
Signed-in Leony credential management.
GET/.well-known/mcp.json

Leony MCP client metadata pointing to the governed Aweb MCP transport.

MCPPublic readWell-known manifest
Manifest/transport metadata is live; execution is governed.
POST/api/v2/videos/generate

Aweb V2 text-to-video generation, routed through API Warehouse and spend controls.

Aweb V2Aweb API keyAweb V2video.generate
Live execution belongs to Aweb core.
POST/api/v2/videos/from-image

Aweb V2 image-to-video generation.

Aweb V2Aweb API keyAweb V2video.from-image
Live execution belongs to Aweb core.
POST/api/v2/personas/{id}/video

Aweb V2 persona talking-head video generation with voice and video providers.

Aweb V2Aweb API keyAweb V2avatar.talking-head-text
Live execution belongs to Aweb core.
POST/api/mcp

Aweb MCP Streamable HTTP transport; use aweb_explore domain=leony.

MCPAweb MCP authAweb MCP
Manifest/transport metadata is live; execution is governed.
POST/api/leony/v1/brief

Create and persist a structured Leony creative brief through the governed runtime.

Approval gateSession or API keyStandalone Leonyleony.brief
Not an open provider-call endpoint.
POST/api/leony/v1/plan

Create and persist a costed Leony provider route with approval and budget boundaries.

Approval gateSession or API keyStandalone Leonyleony.plan
Not an open provider-call endpoint.
POST/api/leony/v1/render

Prepare or queue a governed Leony render job. Provider spend remains approval-gated.

Approval gateSession or API keyStandalone Leonyleony.render
Not an open provider-call endpoint.
POST/api/leony/v1/publish

Create an approval-gated Leony social/commercial publish or export request without direct external posting by default.

Approval gateSession or API keyStandalone Leonyleony.publish
Not an open provider-call endpoint.
POST/api/leony/v1/worker/run

Run the guarded Leony execution worker. It processes only approved queued work and requires worker credentials for provider calls.

Approval gateSession or API keyStandalone Leonyleony.worker
Not an open provider-call endpoint.

Leony MCP

Leony exposes MCP as a governed creative-studio control plane: agents can discover creative tools and resources, inspect provider readiness, prepare render plans, and route execution through Aweb approval gates before any provider spend or publishing side effect.

02

Tools

Leony tools describe creative jobs across video, avatar, persona, voice, campaign, provider catalog, and publishing workflows.

03

Resources

Resources expose the Leony catalog, governance state, provider readiness, and production workflow model.

04

Approval Gates

Live execution requires Aweb authentication, approval policy, provider receipts, and cost controls.

GET /.well-known/mcp.jsonGET /api/leony/v1GET /api/leony/v1/openapi
leony_explorecatalog

Browse Leony providers, workflows, assets, jobs, plans, approvals, metrics, and API surfaces.

Read-only discovery
leony_briefplanning

Create a structured Leony creative brief without calling media providers.

Writes governed Leony state
leony_planplanning

Create a costed provider route and approval boundary for a Leony creative brief.

Writes governed Leony state
leony_renderexecution gate

Prepare or queue a governed render job. Foundation mode never spends provider credits without approval metadata.

Writes governed Leony state
leony_publishexecution gate

Prepare a social/commercial publishing handoff with approval gates and no direct external post by default.

Writes governed Leony state
leony_analyzecatalog

Summarize Leony provider posture, approval queue, spend risk, publishing readiness, or asset strategy.

Read-only discovery
leony_operateoperator

Run bounded operator actions such as inspect lineage, cancel job, rerun plan, request provider setup, or verify governance.

Writes governed Leony state
leony://providers/catalogCatalog

Current Leony creative provider posture derived from Aweb API Warehouse capability mappings.

leony://capabilities/mediaCatalog

Creative media capability slice used by Leony for video, image, avatar, voice, sound, storage, publishing, and analytics.

leony://workflows/indexCatalog

Leony create, compose, publish, and operate workflow definitions.

leony://assets/reelCatalog

Operator-supplied Leony proof reel and first-page asset strategy, including lightweight-loop decisions.

leony://jobs/indexRuntime

Runtime Leony render and publish job index.

leony://jobs/{id}Runtime

Runtime Leony job record with approval and provider-execution posture.

leony://plans/indexRuntime

Runtime Leony render-plan index.

leony://plans/{id}Runtime

Runtime Leony render plan with provider route, cost estimate, and gates.

leony://approvals/indexRuntime

Runtime approval queue for provider spend, likeness, commercial claims, and publishing.

leony://observability/currentRuntime

Current Leony runtime counters and provider posture summary.

leony://governance/policyPolicy

Leony governance doctrine for cost, provider calls, likeness, claims, and publishing.

leony://api/surfacePolicy

Leony API, MCP, key-management, and monitoring exposure plan.

Auth and execution

Leony does not expose raw provider keys or uncontrolled render endpoints from the public app. The standalone developer console creates scoped sk-aweb- keys against the shared Aweb credential ledger, and spend-bearing or publishing actions remain gated by Aweb policy, idempotency, receipts, and Leony-specific scopes.

GET /developersGET /api/leony/v1/keysAuthorization: Bearer sk-aweb-...Aweb-Version: 2026-02-22Idempotency-Key: required on writes

Execution truth

Standalone Leony appLive

Login, docs, studio UI, capabilities, OpenAPI, Neon monitoring, live event SSE, and MCP manifest are served from the Leony deployment.

Aweb executionDelegated

Provider keys, billing, rate limits, idempotency, receipts, and external provider calls remain in Aweb core.

Leony MCP runtimeFoundation

Brief, plan, analyze, and operate are implemented. Render and publish create governed intent and report providerCallsMade: false until live execution is enabled.

Durable databaseLive

Neon/Postgres migrations 0124_leony_creative_studio.sql and 0125_leony_live_events.sql are applied for projects, briefs, plans, jobs, approvals, receipts, costs, MCP calls, events, replay cursors, and live notifications.

Contracts and SDK status

Leony has an internal workspace package, @aweb/leony-contracts, for API route metadata, MCP tool inputs, resource URIs, validation guards, and creative workflow types. A standalone public Leony SDK is not published from this app yet. Clients should use the OpenAPI document and MCP manifest until a dedicated generated client package is promoted.

@aweb/leony-contracts@aweb/leony-mcpPublic SDK: not published yet

Search and agent discovery