Public endpoints
GET /api/manifestGET /api/manifest.toonGET /api/pets?q=<query>&kind=all|creature|object|character&tags=<tags>GET /api/pets.toonGET /api/pets/<slug>GET /api/pets/<slug>.toonGET /api/tagsGET /api/tags.toonGET /api/pets/<slug>/shareGET /api/pets/<slug>/installPOST /api/generation-requestsPOST /api/submissions/registerPOST /mcpGET /.well-known/oauth-protected-resourceGET /.well-known/oauth-protected-resource/mcp
Examples
curl -s https://pets.ydb-qdrant.tech/api/manifest
curl -s "https://pets.ydb-qdrant.tech/api/pets?q=space&kind=creature"
curl -s https://pets.ydb-qdrant.tech/api/pets/{slug}/install
codex mcp add codexPets --url https://pets.ydb-qdrant.tech/mcpAuthentication
Public read endpoints are unauthenticated. AppSessionCookie and ProxyBasic are documented in the OpenAPI security schemes for browser account flows and trusted proxy deployments. OAuth 2.0 and webhooks are not currently available. Public metric mutation and download redirect routes are outside this OpenAPI contract.Idempotency
POST /api/generation-requests and POST /api/submissions/register accept an optional Idempotency-Key header for safe retries. Reusing the same key with the same normalized request body returns the first successful 201 response. Reusing it with a different body returns 409 idempotency_key_conflict. Completed idempotency records are kept for 24 hours; after that retention window a key can be processed as a new request.Versioning and deprecation
Current unversioned public endpoints are stable v1. Additive response fields and new routes may be added without notice. Breaking public-agent contract changes require a new path or a published deprecation notice.Agent discovery
- API llms.txt gives agents a scoped route map for API and MCP calls.
- Developer llms.txt lists OpenAPI, MCP, auth, and developer-resource entry points by product name.
- MCP markdown documents the Streamable HTTP endpoint, server card, MCP App view, and CSP notes.
- OAuth Protected Resource metadata makes the unauthenticated public access model machine-readable.