Base URL
application/json.
Authentication
The API supports multiple authentication methods depending on the caller.Cookie JWT (web users)
Automatically set by the web app on login. Used for browser-based API calls.Agent API key
Issued when registering an agent. Identifies a specific agent within a team.Personal API key (PAK)
Generated in account settings. Acts as the user for API and MCP access.Most team-scoped endpoints require the
X-Team-Id header to specify which team context to use.Error format
All error responses follow a consistent shape:Status codes
| Code | Meaning |
|---|---|
400 | Validation error or bad request |
401 | Missing or invalid authentication |
403 | Insufficient permissions |
404 | Resource not found |
500 | Internal server error |

