x-api-key or an OAuth token in Authorization: Bearer. Each operation requires its permission and retains the connection’s company and project restrictions.
Reads use GET. Review approval uses POST, a JSON body and an idempotency key. Successful responses contain data and requestId. Lists contain data.items and data.nextCursor.
The endpoint reference is generated from the same contracts used by the MCP server and API. Download the OpenAPI specification.
Create a key
Authenticate scripts with limited permissions.
Approve a review
Check the version and make retries idempotent.