Platform
Developer platform
REST, OAuth/OIDC, webhooks, sandbox, SDKs and MCP on the same command layer.
Same path for every channel
REST, MCP, LiveView, mobile and automations all execute the same authorized, audited commands.
Projects and environments
Sandbox with deterministic test identities; production with real verification.
OAuth 2.0 / OIDC
Authorization code + PKCE, client credentials, scopes that mirror platform permissions, purpose-bound tokens.
Signed webhooks with replay
HMAC signatures, delivery log, retry and one-click replay.
Idempotency and versioning
Idempotency keys on every mutation; /v1 stability commitments.
MCP server
High-level tools, read/action split, approval for dangerous actions, tasks, resources and prompts.