AlertForge API & agent access

Two things don't require a login: a health check at GET /api/health, and the MCP server at /api/mcp (JSON-RPC 2.0, Streamable HTTP transport). Without auth it exposes one read-only tool — get_product_info; with OAuth or a fallback API key it adds account tools that plan, create, monitor, and export overlay packs, Stream Alerts, and transparent videos (see /docs/agents). Everything else that writes data or spends money — starting a render from the web app, creating a checkout session, touching your dashboard — requires a signed-in session or an approved agent connection.

AlertForge accounts are created and authenticated through the web app (/signup / /login) via Supabase Auth — email/password, magic link, or Google sign-in. Sessions are Supabase-issued JWTs carried in browser cookies. A separate OAuth 2.1 + PKCE flow lets an MCP agent act on a user's behalf after that user signs in and approves access. Customers with an active Starter, Pro, Max, or Ultra subscription can manage connected apps and create fallback access keys at /dashboard/agents and see /docs/agents for setup. The full machine-readable account of browser sessions, MCP OAuth, and the absence of auth.md identity registration lives at /auth.md.

• /openapi.jsonOpenAPI 3.1 — the two documented HTTP operations above, with real prices
• /.well-known/api-catalogAPI catalog (RFC 9727) — links this page, the OpenAPI doc, and the health check together
• /.well-known/mcp/server-card.jsonMCP server card — describes the live /api/mcp endpoint
• /.well-known/oauth-protected-resourceProtected resource metadata (RFC 9728) — points to the real token issuer
• /.well-known/openid-configurationOIDC discovery — mirrors the real Supabase Auth issuer's metadata
• /auth.mdauth.md — honest, human-readable auth status
• /docs/webhooksAlertForge webhooks — current public webhook availability and the supported MCP alternative
• /.well-known/agent-skills/index.jsonAgent Skills index — step-by-step skills for building a pack and reading pricing
• /llms.txtllms.txt — whole-site fact sheet for AI agents

MCP is available with an active paid subscription. For an integration beyond the supported MCP tools, email [email protected] with what you need to build.