AppHandoff
Overview
AppHandoff API 2.0.0
Section titled “AppHandoff API 2.0.0”Build in Lovable. Bots plan. You approve. Kanban ships it.
Projects, handoffs, and MCP context (handoff tickets, project coordination).
Authenticate with a Bearer API key (ah_k_...) from Settings or via Supabase session cookie.
Information
- License: Proprietary
- OpenAPI version:
3.1.0
Operations
Section titled “ Operations ”GET
/auth/status POST
/auth/logout POST
/auth/dev-login GET
/auth/github POST
/auth/login GET
/auth/me POST
/auth/refresh POST
/auth/signup GET
/me PATCH
/me GET
/me/preferences PATCH
/me/preferences GET
/roles PATCH
/me/notification-prefs GET
/keys POST
/keys GET
/keys/{keyId} DELETE
/keys/{keyId} GET
/projects POST
/projects GET
/projects/{id} DELETE
/projects/{id} PATCH
/projects/{id} DELETE
/projects/{id}/watchers/me GET
/tickets GET
/tickets/audit POST
/projects/{id}/tools POST
/projects/{id}/rules GET
/runs GET
/github/repos GET
/github/status POST
/stripe/checkout POST
/stripe/portal GET
/billing/summary GET
/team/members DELETE
/team/members PATCH
/team/join-requests PATCH
/team/members/{userId} POST
/team/invite DELETE
/team/invitations/{id} GET
/admin/users POST
/admin/users DELETE
/admin/users/{userId} PATCH
/admin/users/{userId} GET
/admin/invites PATCH
/admin/invites GET
/admin/runs GET
/admin/mcp-usage GET
/admin/logs GET
/health GET
/health/metrics GET
/health/deep GET
/health/ping GET
/health/public GET
/version GET
/uptime GET
/mcp-bot POST
/mcp-bot DELETE
/mcp-bot OPTIONS
/mcp-bot GET
/mcp-bot/health OPTIONS
/mcp-bot/health OPTIONS
/mcp-bot/public-health GET
/mcp-bot/ping GET
/mcp-bot/tools OPTIONS
/mcp-bot/tools POST
/mcp-bot/execute OPTIONS
/mcp-bot/execute GET
/mcp/status OPTIONS
/mcp/status GET
/mcp/ping OPTIONS
/mcp/ping GET
/oauth/authorize POST
/oauth/token OPTIONS
/oauth/token OPTIONS
/oauth/mcp-inspector/token POST
/oauth/consent POST
/oauth/decision GET
/oauth/authorize POST
/oauth/register OPTIONS
/oauth/register POST
/oauth/token OPTIONS
/oauth/token OPTIONS
/oauth/mcp-inspector/token POST
/cron/deploy-health POST
/cron/agents-cursor POST
/cron/analysis-jobs POST
/cron/indexnow POST
/webhooks/github POST
/webhooks/stripe GET
/settings/roles PUT
/settings/roles GET
/activity GET
/notifications POST
/notifications/read GET
/debug POST
/dev/events OPTIONS
/dev/events GET
/dev/sessions OPTIONS
/dev/sessions GET
/integrations POST
/sse-nonce GET
/openapi.json POST
/agents/plan PATCH
/agents/plans/{id} GET
/agents/workers GET
/agents/runs GET
/changelog GET
/mcp-analytics Authentication
Section titled “ Authentication ”bearerApiKey
Section titled “bearerApiKey ”API key (ah_k_…) from Settings > API Keys.
Security scheme type: http
Bearer format: API Key
cookieAuth
Section titled “cookieAuth ”Supabase session cookie (web UI).
Security scheme type: apiKey
Cookie parameter name: sb-access-token