API overview

REST + SSE. JWT Bearer. No demo tokens.

Flow

01Client

02JWT

03REST / SSE

04Engine

05SQLite

Auth

POST /api/v1/auth/signup, /login, /guest, /google, /refresh. Send Authorization: Bearer <access_token>. Access tokens expire in 15 minutes; refresh lasts 7 days.

Workspace

POST /api/v1/workflows with { goal }. Poll GET /workflows/{run_id} or stream GET /workflows/{run_id}/events (SSE).

Integrations

POST /integrations/build, /build-from-url, /build-from-prompt. Poll GET /integrations/builds/{id} until status is success or error.

Other

Credentials, usage/context, capabilities/site-health, capabilities/debug, capabilities/generate, resume/create, memory, contact, settings.