REST API¶

The primary interface is MCP at /mcp. A REST surface is also available for health checks, file links, and selected service operations.

Health¶

GET /healthz

Returns server health and basic status.

POST /mcp

Streamable HTTP MCP endpoint used by ChatGPT and other MCP clients.

REST tool calls use consistent success/error envelopes. Validation errors return structured ok: false payloads instead of raw framework exceptions.

The fixed Skills registry is also available through REST:

GET  /tools/skills_list
POST /tools/skill_load       {"name": "debugging"}
POST /tools/skill_read_file  {"name": "debugging", "path": "checklist.md"}

Skill directory changes are visible on the next call and do not alter the MCP tool list.

Tokenized file downloads are served by the built-in HTTP app. Links are bearer URLs with TTL, optional max-download limits, and revocation support.

Public deployments should use OAuth. Localhost bypass can be enabled for development, but unauthenticated public access is unsafe.