The REST API is simply a wrapper around the command line (and actually invokes the command line). It relies on the command line tool validating its input. Currently only the `/list` endpoint is implemented, exposing the `list` command.