One API under the MCP server, the CLI and the web app

Everything the MCP server, the CLI and the web app do goes through one API, so a script can do whatever a person or an agent can.

API keys

An Organization's admins create its API keys, and every key starts with ohmako_, so you can tell one at a glance. When API keys arrive, we'll store only a hash of each one, so we can't read a key back. The security page says how we keep keys and secrets.

The reference

The public v1 reference, generated from the API's OpenAPI description, is published in phase 9. Until then, the docs say what the API covers.