# Tobie API

> The Tobie platform API (v1.0.0): clients, projects, tasks, intake and extraction, reviews, pipeline runs, CRM and open-enrollment campaigns, for operator agents (API key) and client admins (OAuth 2.1). REST under /v1, MCP at /mcp. Writes are planned, idempotent and, above Tier 1, approved by a human.

## Docs

- [Agent guide](https://api.tobie.team/v1/agent-guide.md): authentication, scopes, pagination, idempotency, errors, approvals, MCP connection snippets and a curl walkthrough
- [OpenAPI 3.1](https://api.tobie.team/v1/openapi.json): every operation with x-tobie-scope, x-tobie-tier and x-tobie-audience
- [API reference](https://api.tobie.team/reference): every operation with parameters, scopes and code samples
- [Developer portal](https://api.tobie.team/): guides, quickstart, changelog and status for people
- [Connect your AI](https://api.tobie.team/connect): step-by-step setup for ChatGPT, Claude, Claude Code, Cursor and VS Code
- [MCP tool catalogue](https://api.tobie.team/reference/mcp): every tool with its annotations, scope and input schema
- [Changelog](https://api.tobie.team/changelog) and [status](https://api.tobie.team/status)
- [MCP server](https://api.tobie.team/mcp): 54 tools generated from the same registry
- [Health](https://api.tobie.team/v1/health): no credential needed

## Resources

- meta (1), clients (7), projects (5), tasks (8), timeline (1), actions (1), notifications (2), intake (6), extraction (1), reviews (3), pipeline (5), crm (8), campaigns (2), files (3), search (1), approvals (4), operations (3), events (2), webhooks (9), oauth_grants (2), keys (4), memberships (2), execution (2)

## Rules

- Authorization: Bearer <API key or OAuth token>; never in a URL.
- No personal data in paths or query strings; search contacts with POST /contacts:search.
- Send Idempotency-Key on creating writes; If-Match with the ETag on PATCH.
- 202 means proposed, not done; 404 means not found or not yours.