Base URLs

Steve's HTTP routes are served from the Convex site domain, not the Convex client domain.

Route families

Converting from client URLs

The frontend applications store Convex client URLs such as:

https://your-deployment.convex.cloud

or:

wss://your-deployment.convex.cloud

To call HTTP routes directly, convert that origin to:

https://your-deployment.convex.site

Example:

const httpUrl = convexUrl.replace("wss://", "https://").replace(".cloud", ".site");

That same conversion is already used in the admin app for invitation flows and the workflow agent.

Versioning

Only the external integration surface is explicitly versioned today:

• /api/v1/... is the stable integration namespace.
• /api/invitation/... is product-specific and unversioned.
• /api/agent/chat is private and unversioned.

CORS behavior

Steve uses different CORS policies per surface:

The wildcard policy is only used on API-key routes. Invitation and agent endpoints accept secrets from browsers and therefore require an explicit origin allowlist.