All API routes require a valid session. Unauthenticated requests return 401 with WWW-Authenticate: Bearer.
Discovery Endpoints
- GET /.well-known/mcp
- GET /.well-known/ai-plugin.json
- GET /.well-known/oauth-authorization-server
- GET /.well-known/openid-configuration
- GET /.well-known/jwks.json
- GET /openapi.json
Core API
- GET /api/accounts
- GET /api/accounts/[slug]
- GET /api/skills
- POST /api/skills/[id]/run
- GET /api/jobs/[jobId]
- GET /api/search-terms/[accountId]
- POST /api/webhooks
- GET /api/sse
- GET /api/feed.xml
- GET /graphql
Full spec: /openapi.json