openwrt-iac / uapi / install
The signed APK feed for OpenWrt 25.12+. Run these on your router as root.
curl -fsSL https://openwrt-iac.github.io/feed/uapi-feed.pub.pem \
| tee /etc/apk/keys/uapi-feed.pub.pem > /dev/nullecho 'https://openwrt-iac.github.io/feed/packages/all/uapi/packages.adb' \
> /etc/apk/repositories.d/uapi.list
apk updateapk add uapi
The same feed serves every package under the openwrt-iac org
(currently uapi and unbound-uci-ext). Subsequent
apk add <package> calls find them without further
setup. Pin this exact build with
apk add uapi=3.0.0-r1.
wget https://github.com/openwrt-iac/uapi/releases/download/v2.5.1/uapi-2.5.1-r1.apk \
-O /tmp/uapi-2.5.1.apkapk add --allow-untrusted /tmp/uapi-2.5.1.apk
The feed serves the current release only, so this one comes from its GitHub
Release and needs no signing key or repository entry. It serves its API under
/api/v2, not /api/v3.
wget https://github.com/openwrt-iac/uapi/releases/download/v1.2.1/uapi-1.2.1-r1.apk \
-O /tmp/uapi-1.2.1.apkapk add --allow-untrusted /tmp/uapi-1.2.1.apk
The feed serves the current release only, so this one comes from its GitHub
Release and needs no signing key or repository entry. It serves its API under
/api/v1, not /api/v3.
uapi installed under /usr/share/uapi/, registered
/api/v3=/usr/share/uapi/main.uc with uhttpd's
main instance, and restarted uhttpd. The token store
lives at /etc/config/uapi (a conffile - preserved across
upgrades).
Mint a token and try the API:
uapi-token create --name first_token --scope '*:rw'
# (the cleartext token is printed once - copy it)
curl -H "Authorization: Bearer <token>" \
https://<router>/api/v3/system
apk upgrade uapi picks up new releases from this feed. The
token store is preserved across upgrades.
The feed carries the current release only, so a downgrade does not come from it. Use the version selector at the top of this page for an older release's steps; anything other than the current release installs from its GitHub Release. A major bump also moves the API prefix, so crossing one changes the URL your clients call. See CHANGELOG for per-release breaking-change notes.