generated: '2026-08-13'
method: searched
source: https://ext.gojiberry.ai/documentation (OpenAPI info.description) + openapi/_original/gojiberry-ai-external-openapi-original.json
summary: Cross-cutting request/response semantics for the Gojiberry AI External API.
authentication:
  style: bearer-token
  header: 'Authorization: Bearer <API_KEY>'
  format: JWT
  provisioning: app.gojiberry.ai -> Settings -> API -> Create API Key
  see: authentication/gojiberry-ai-authentication.yml
impersonation:
  supported: true
  header: x-impersonate-user-id
  rule: API key must belong to the organization owner; the impersonated user must be in the same organization.
  helpers:
  - GET /v1/organization/members  # list member user IDs
  - GET /v1/user/me               # verify acting user
pagination:
  style: page-number
  params:
  - page
  - limit
  applies_to:
  - GET /v1/contact
  filtering:
    examples:
    - search
    - agent
    - dateFrom
idempotency:
  supported: false
  note: No Idempotency-Key header or parameter is documented or present in the OpenAPI. Do NOT emit an Idempotency pointer.
versioning:
  scheme: uri-path
  current: v1
  base_path: /v1
error_envelope:
  format: nest-error-envelope
  shape: '{"message": string | string[], "statusCode": integer, "error"?: string}'
  rfc9457: false
  see: errors/gojiberry-ai-problem-types.yml
rate_limiting:
  documented: true
  limit: 100 requests per minute per API key
  headers_observed: none exposed on unauthenticated probe
  see: rate-limits/gojiberry-ai-rate-limits.yml
webhooks:
  supported: true
  direction: outbound
  verification_header: x-gojiberry-user-id
  see: asyncapi/gojiberry-ai-webhooks.yml
support:
  email: hello@gojiberry.ai
agent_surface:
  mcp:
    endpoint: https://mcp.gojiberry.ai/mcp
    transport: streamable-http
    handshake: initialize first; tools/list before initialize returns -32600
    auth: OAuth 2.1 authorization code + PKCE (dynamic client registration)
    see: mcp/gojiberry-ai-mcp.yml
  crosswalk: mcp/gojiberry-ai-tool-crosswalk.yml
  note: >-
    The MCP surface and the REST surface do NOT share an auth model — an API key
    that works against ext.gojiberry.ai cannot be presented to the MCP server,
    and an MCP OAuth token cannot be presented to the REST API.
content_type:
  requests: application/json (multipart/form-data on POST /v1/unibox/messages/send-message)
  responses: application/json
tracing:
  request_id_header: none documented