AppHandoff
Overview
AppHandoff API 2.0.0
Section titled “AppHandoff API 2.0.0”Build in Lovable. Bots plan. You approve. Kanban ships it.
Projects, handoffs, and MCP context (scan, API spec, handoff tickets).
Authenticate with a Bearer API key (ah_k_...) from Settings or via Supabase session cookie.
Information
- License: Proprietary
- OpenAPI version:
3.1.0
Operations
Section titled “ Operations ”GET
/auth/status POST
/auth/logout POST
/auth/dev-login GET
/auth/github POST
/auth/login GET
/auth/me POST
/auth/refresh POST
/auth/signup GET
/me PATCH
/me GET
/me/preferences PATCH
/me/preferences GET
/roles PATCH
/me/notification-prefs GET
/keys POST
/keys GET
/keys/{keyId} DELETE
/keys/{keyId} GET
/projects POST
/projects GET
/projects/{id} DELETE
/projects/{id} PATCH
/projects/{id} DELETE
/projects/{id}/watchers/me GET
/tickets GET
/tickets/audit POST
/projects/{id}/tools POST
/projects/{id}/rules GET
/runs POST
/scan GET
/scans POST
/scans GET
/scans/{id} GET
/github/repos GET
/github/status POST
/stripe/checkout POST
/stripe/portal GET
/billing/summary GET
/team/members DELETE
/team/members PATCH
/team/join-requests POST
/team/invite DELETE
/team/invitations/{id} GET
/admin/users POST
/admin/users DELETE
/admin/users/{userId} PATCH
/admin/users/{userId} GET
/admin/invites PATCH
/admin/invites GET
/admin/runs GET
/admin/mcp-usage GET
/admin/logs GET
/health GET
/health/metrics GET
/health/deep GET
/health/ping GET
/health/public GET
/version GET
/uptime GET
/mcp-bot POST
/mcp-bot DELETE
/mcp-bot OPTIONS
/mcp-bot GET
/mcp-bot/health OPTIONS
/mcp-bot/health OPTIONS
/mcp-bot/public-health GET
/mcp-bot/ping GET
/mcp-bot/tools OPTIONS
/mcp-bot/tools POST
/mcp-bot/execute OPTIONS
/mcp-bot/execute GET
/mcp/status OPTIONS
/mcp/status GET
/mcp/ping OPTIONS
/mcp/ping POST
/oauth/token OPTIONS
/oauth/token OPTIONS
/oauth/mcp-inspector/token POST
/oauth/consent POST
/oauth/decision POST
/oauth/register OPTIONS
/oauth/register POST
/oauth/token OPTIONS
/oauth/token OPTIONS
/oauth/mcp-inspector/token POST
/cron/health-record POST
/cron/rescan POST
/cron/agents-cursor POST
/cron/indexnow POST
/webhooks/github POST
/webhooks/stripe GET
/settings/roles PUT
/settings/roles GET
/activity GET
/notifications POST
/notifications/read GET
/debug POST
/dev/events OPTIONS
/dev/events GET
/dev/sessions OPTIONS
/dev/sessions GET
/integrations POST
/sse-nonce GET
/openapi.json POST
/agents/plan GET
/agents/workers GET
/agents/runs GET
/changelog GET
/mcp-analytics Authentication
Section titled “ Authentication ”bearerApiKey
Section titled “bearerApiKey ”API key (ah_k_…) from Settings > API Keys.
Security scheme type: http
Bearer format: API Key
cookieAuth
Section titled “cookieAuth ”Supabase session cookie (web UI).
Security scheme type: apiKey
Cookie parameter name: sb-access-token