# CloudKitchens

> CloudKitchens (a City Storage Systems company) builds and operates delivery-only "ghost kitchen"
> facilities and the restaurant technology that runs them. For integration partners it publishes the
> CloudKitchens Public API — an OAuth 2.0 secured REST API of 80 operations and 27 webhook events
> covering orders, menus, storefront availability, delivery dispatch, finance, inventory, reports,
> reviews, loyalty and organization/store pairing. Access is partner-gated: applications, webhook
> endpoints and stores are onboarded manually by a CloudKitchens Account Representative, who also
> issues the Application ID and Client Secret for the production and staging environments and
> provisions the partner-specific API base URL.

Generated by the API Evangelist enrichment pipeline on 2026-08-01. Method: generated (CloudKitchens
publishes no llms.txt of its own — /llms.txt returns 404 on developer-guides.cloudkitchens.com).

## APIs

- [CloudKitchens Public API](https://developer-guides.cloudkitchens.com/api-reference/): OpenAPI
  3.0.1, 80 operations across 19 endpoint groups plus 27 webhook events, OAuth 2.0 with 29 scopes.

## Specs

- [OpenAPI 3.0.1 (harvested verbatim)](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/openapi/cloudkitchens-public-api-openapi.yml)
- [OpenAPI Overlay of API Evangelist annotations](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/overlays/cloudkitchens-public-api-overlay.yaml)
- [OpenID Connect discovery document (iam.cloudkitchens.com)](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/well-known/cloudkitchens-openid-configuration.json)

## Docs

- [Developer Portal](https://developer.cloudkitchens.com/)
- [Developer Documentation](https://developer-guides.cloudkitchens.com/docs/)
- [API Reference](https://developer-guides.cloudkitchens.com/api-reference/)
- [Onboard your application](https://developer-guides.cloudkitchens.com/docs/onboard-application/)
- [Onboard your webhook configurations](https://developer-guides.cloudkitchens.com/docs/onboard-webhook/)
- [Onboard your store](https://developer-guides.cloudkitchens.com/docs/onboard-store/)
- [Webhook authentication guide](https://developer-guides.cloudkitchens.com/docs/guides-webhook-authentication/)
- [Rate limiting guide](https://developer-guides.cloudkitchens.com/docs/guides-rate-limiting/)
- [Order lifecycle](https://developer-guides.cloudkitchens.com/docs/orders-integrations-lifecycle/)
- [Support](https://support.cloudkitchens.com/)

## Artifacts

- [Authentication profile](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/authentication/cloudkitchens-authentication.yml)
- [OAuth scopes](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/scopes/cloudkitchens-scopes.yml)
- [API conventions](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/conventions/cloudkitchens-conventions.yml)
- [Webhook event catalog](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/asyncapi/cloudkitchens-webhooks.yml)
- [Error catalog](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/errors/cloudkitchens-problem-types.yml)
- [Rate limits](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/rate-limits/cloudkitchens-rate-limits.yml)
- [Lifecycle and versioning](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/lifecycle/cloudkitchens-lifecycle.yml)
- [Data model](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/data-model/cloudkitchens-data-model.yml)
- [Conformance](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/conformance/cloudkitchens-conformance.yml)
- [Sandbox / staging](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/sandbox/cloudkitchens-sandbox.yml)
- [Domain security](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/security/cloudkitchens-domain-security.yml)
- [Agentic access contracts](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/agentic-access/cloudkitchens-agentic-access.yml)
- [Agent skills](https://raw.githubusercontent.com/api-evangelist/cloudkitchens/refs/heads/main/skills/_index.yml)

## How to call it

1. Ask your CloudKitchens Account Representative to register your Application. You receive an
   Application ID (formerly Partner ID) and Client Secret per environment.
2. Request a token: `POST /v1/auth/token` with `grant_type=client_credentials`, your `client_id`,
   `client_secret`, and the `scope`(s) you were granted. Tokens are valid for 30 days — store and
   re-use them.
3. Send `Authorization: Bearer <access_token>` on every call, plus `X-Store-Id: <your store id>` on
   store-scoped operations.
4. Register your webhook endpoint through your Account Representative and verify every delivery
   against the `X-HMAC-SHA256` header before acting on it.
5. Respect the limits: 20 authenticated requests per second per IP, 3 unauthenticated per minute,
   and per-endpoint quotas at the store level. HTTP 429 means back off.

## Notes

- No self-serve signup: there is no public sign-up, pricing page, or free tier for the Public API.
- No official SDK, CLI, or Postman collection is published.
- No hosted MCP server and no A2A agent card are published.
- No status page, public changelog, security.txt, or trust center was found.