REST API with bearer authentication Available
All mutation endpoints require a bearer token and resolve the acting principal and organization.
Evidence: app/console_api.py; tests/test_console.py
Developers, API and MCP
Typed, tenant-scoped APIs and a governed MCP surface.
MCP server for governed control-plane actions Available
A dedicated MCP surface exposes create-goal and create-requirement with authority checks.
Evidence: docs/architecture/ADR-IGB-MCP-001-dedicated-mcp.md
Published API reference Planned
Planned: a public OpenAPI reference; interactive docs are disabled on the gateway by design.
Evidence: app/gateway.py