V1 API Services

Puppet Agents use various network services which the Puppet Master provides in order to manage systems. Other systems can access these services in order to put the information that the Puppet Master has to use.

The V1 API is all based off of dispatching to puppet's internal "indirector" framework. Every HTTP endpoint in V1 follows the form /:environment/:indirection/:key, where * :environment is the name of the environment that should be in effect for the request. Not all endpoints need an environment, but the path component must always be specified. * :indirection is the indirection to dispatch the request to. * :key is the "key" portion of the indirection call.

Using this API requires a significant amount of understanding of how puppet's internal services are structured. The following documents provide some specification for what is available and the ways in which they can be interacted with.

Configuration Management Services

These services are all related to how the Puppet Agent is able to manage the configuration of a node.

Informational Services

These services all provide extra information that can be used to understand how the Puppet Master will be providing configuration management information to Puppet Agents.

SSL Certificate Related Services

These services are all in support of Puppet's PKI system.


The V2 HTTP API is accessed by prefixing requests with /v2.0. Authorization for these endpoints is still controlled with the auth.conf authorization system in puppet. When specifying the authorization of the V2 endpoints in auth.conf the /v2.0 prefix on V2 API paths must be retained; the full request path is used.

The V2 API will only accept payloads formatted as JSON and respond with JSON (MIME application/json).


Error Responses

All V2 API endpoints will respond to error conditions in a uniform manner and use standard HTTP response code to signify those errors.

The V2 API paths are prefixed with /v2.0 instead of /v2 so that it is able to respond with 404, but not interfere with any environments in the V1 API. v2 is a valid environment name, but v2.0 is not.

All error responses will contain a body, except when it is a HEAD request. The error responses will uniformly be a JSON object with the following properties:

A JSON schema for the error objects is also available.

Serialization Formats

Puppet sends messages using several different serialization formats. Not all REST services support all of the formats.