Raw dispatch

When a REST sugar route isn't available for the command you need, fall back to the raw dispatcher. Every Tauri command name is reachable this way.

Method	Path	Auth	Body
POST	/invoke	bearer	{cmd, args}
POST	/x	bearer	encrypted variant for sensitive commands

The complete catalog of cmd names + args shapes lives in src-tauri/src/api_dispatch.rs.

Example

curl -s -X POST http://localhost:8090/invoke \
     -H 'authorization: Bearer <token>' \
     -H 'content-type: application/json' \
     -d '{"cmd":"list_bots","args":null}'

When to use /x

/x accepts the same body but wrapped in an encrypted envelope. The client uses it for commands that carry credentials (add_bot with a password, account_creator_set_config). External integrations can ignore /x and send everything through /invoke — every command accepts both.