openapi: 3.2.0
info:
  title: Comms Harbor API
  version: 1d751aaf
  description: Manage domain email, mailboxes, aliases and durable jobs. Each call uses its organization's identity.
servers:
- url: https://commsharbor.com
tags:
- name: CommsHarbor
paths:
  /api/:
    get:
      operationId: get_api
      summary: 'Discover the whole API: every endpoint, every auth mode and the MCP endpoint'
      description: 'Returns: { name, description, build, environment, base_url, docs, auth, endpoints, mcp, mcp_tools }'
      security: []
      responses:
        '200':
          description: '{ name, description, build, environment, base_url, docs, auth, endpoints, mcp, mcp_tools }'
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiIndex'
      tags:
      - CommsHarbor
components:
  schemas:
    ApiIndex:
      type: object
      properties:
        name:
          type: string
          description: Product name.
        description:
          type: string
          description: What the product does, in one sentence.
        build:
          type: string
          description: Deployed commit.
        environment:
          type: string
          description: 'Which environment answered: `production` or `local`.'
        base_url:
          type: string
          description: Origin this API is served from.
        docs:
          type: object
          description: Links to llms.txt, llms-full.txt, openapi.json, the MCP endpoint and the human UI.
        auth:
          type: object
          description: Every authentication mode and how to obtain it.
        endpoints:
          type: array
          items:
            type: object
          description: Every endpoint with method, path, auth, absolute URL and what it returns.
        mcp:
          type: object
          description: Remote MCP endpoint and transport.
        mcp_tools:
          type: array
          items:
            type: string
          description: Name of every MCP tool.
      required:
      - name
      - description
      - build
      - environment
      - base_url
      - docs
      - auth
      - endpoints
      - mcp
      - mcp_tools
      description: The self-describing index of the whole API.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Use an organisation API key (`mmk_…`) for permitted work in that organisation. Account operations require the shared account session. Paid routes accept a global credit token (`cred_…`). Monthly purchases require a recent human session.
    globalAccount:
      type: apiKey
      in: cookie
      name: __Host-mm-auth
      description: Global session in the product's HttpOnly cookie; writes require exact Origin and X-CSRF-Token.
    contaChaveApi:
      type: http
      scheme: bearer
      bearerFormat: mmk_…
      description: 'Account API key: `Authorization: Bearer mmk_…` or `X-Api-Key: mmk_…`. Created on the account page (API keys), valid only in the product where it was created; it acts as the account (or the organization that owns it).'
    carteiraAgente:
      type: http
      scheme: bearer
      bearerFormat: mmw_…
      description: 'Wallet credential of an agent without an account (`Authorization: Bearer mmw_…`, 30 days, this product only): POST /api/auth/wallet/agent/start, sign the message with the wallet, POST /api/auth/wallet/agent/token. The owner is `x402:<address>`.'
x-service-info:
  categories:
  - email
  - mailbox-management
  docs:
    homepage: https://commsharbor.com/
    apiReference: https://commsharbor.com/developers
    llms: https://commsharbor.com/llms.txt