Skip to content
AppHandoff AppHandoff Docs

Overview

AppHandoff API 2.0.0

Section titled “AppHandoff API 2.0.0”

Build in Lovable. Bots plan. You approve. Kanban ships it.

Projects, handoffs, and MCP context (handoff tickets, project coordination). First-party portal operations require a Supabase session. MCP uses OAuth, while Context Capture uses its project-bound private ticket credential.

Information

Operations

Section titled “ Operations ”
GET
/auth/status
POST
/auth/logout
POST
/auth/dev-login
POST
/auth/exchange-supabase-token
GET
/auth/github
POST
/auth/login
GET
/auth/me
POST
/auth/refresh
POST
/auth/send-password-reset
POST
/auth/send-magic-link
POST
/auth/signup
POST
/projects/{id}/assistant/chat
GET
/projects/{id}/share-link
POST
/projects/{id}/share-link
GET
/public/projects/{token}
GET
/github/repos
GET
/github/status
GET
/github/connection
GET
/github/app/install-url
GET
/github/app/install/callback
POST
/github/app/install/complete
POST
/github/app/uninstall
GET
/github/webhooks/install
POST
/github/webhooks/install
POST
/stripe/checkout
POST
/stripe/portal
GET
/billing/insights
POST
/team/invitations/accept/{token}
POST
/admin/seed-ticket-embeddings
GET
/health
GET
/health/metrics
GET
/health/deep
GET
/health/ping
GET
/health/public
GET
/version
GET
/uptime
GET
/mcp-bot
POST
/mcp-bot
DELETE
/mcp-bot
OPTIONS
/mcp-bot
GET
/mcp-bot/health
OPTIONS
/mcp-bot/health
GET
/mcp-bot/public-health
OPTIONS
/mcp-bot/public-health
GET
/mcp-bot/ping
GET
/mcp-bot/tools
OPTIONS
/mcp-bot/tools
POST
/mcp-bot/execute
OPTIONS
/mcp-bot/execute
GET
/mcp/status
OPTIONS
/mcp/status
GET
/mcp/ping
OPTIONS
/mcp/ping
GET
/oauth/authorize
POST
/oauth/token
OPTIONS
/oauth/token
POST
/oauth/mcp-inspector/token
OPTIONS
/oauth/mcp-inspector/token
POST
/oauth/consent
POST
/oauth/decision
GET
/oauth/authorize
POST
/oauth/register
OPTIONS
/oauth/register
POST
/oauth/token
OPTIONS
/oauth/token
POST
/oauth/mcp-inspector/token
OPTIONS
/oauth/mcp-inspector/token
POST
/cron/backfill-handoff-complete
POST
/cron/deploy-health
POST
/cron/agents-cursor
POST
/cron/agents-supervisor
GET
/cron/analysis-jobs
POST
/cron/analysis-jobs
GET
/cron/reclaim-agent-runs
POST
/cron/reclaim-agent-runs
GET
/cron/stale-in-progress
POST
/cron/stale-in-progress
POST
/cron/indexnow
POST
/webhooks/github
POST
/webhooks/stripe
POST
/webhooks/cursor-agent
GET
/debug
POST
/dev/events
OPTIONS
/dev/events
GET
/dev/sessions
OPTIONS
/dev/sessions
GET
/integrations/webhooks
POST
/integrations/webhooks
GET
/integrations/webhooks/setup-info
GET
/integrations/webhooks/status
POST
/integrations/webhooks/reveal-secret
GET
/openapi.json
GET
/public/projects/{token}/events
GET
/trpc/{trpc}
POST
/trpc/{trpc}
GET
/agents/runs/{id}/events
POST
/agents/runs/{id}/events
GET
/surveys/{code}
POST
/surveys/{code}/responses
POST
/integrations/context-capture/v1/tickets
GET
/integrations/context-capture/v1/tickets/{ticketId}
PATCH
/integrations/context-capture/v1/tickets/{ticketId}
GET
/changelog

Authentication

Section titled “ Authentication ”

contextCaptureCredential

Section titled “contextCaptureCredential ”

Project-bound Context Capture credential.

Security scheme type: http

Bearer format: ah_cc project credential

portalSessionBearer

Section titled “portalSessionBearer ”

First-party portal Supabase session token.

Security scheme type: http

Bearer format: Supabase access token

cookieAuth

Section titled “cookieAuth ”

Supabase session cookie (web UI).

Security scheme type: apiKey

Cookie parameter name: sb-access-token