Registry HTTP API
The registry implements the SwiftPM registry standard (SE-0292). These are the endpoints SwiftPM and your tools call.
GET /{scope}/{name}
List a package's releases. (SE-0292 §4.1)
GET /{scope}/{name}/{version}
Fetch metadata for a specific release. (§4.2)
GET /{scope}/{name}/{version}/Package.swift
Fetch the package manifest. (§4.3)
GET /{scope}/{name}/{version}.zip
Download the immutable source archive (Content-Type: application/zip). (§4.4)
GET /identifiers?url={repository-url}
Look up package identifiers for a source-control URL. (§4.5)
PUT /{scope}/{name}/{version}
Publish a release by uploading a multipart/form-data body with a source-archive part. Requires a token. (SE-0391)
Responses follow the SE-0292 media types; errors are generally problem+json (RFC 7807). Authenticate direct API calls with an Authorization: Bearer token.