REST API reference

Authentication

Authenticated endpoints take either the browser session cookie the panel sets at POST /auth/login, or an API key. Create keys in the panel under Settings → API keys, give each one the narrowest set of scopes that does the job, optionally restrict it to a single app, and send it as a bearer token:

curl -H "Authorization: Bearer lm_your_api_key" \
  "$API_URL/apps/$APP_ID/changelogs"

A key can only call endpoints whose scope it holds, and an app-restricted key is checked against the :appId in the path as well.

Google sign-in is a browser flow, not an API call. Send the person to GET /auth/google as a normal navigation. Google returns them to GET /auth/google/callback, which verifies the token, signs them in — creating the account and its personal organization the first time — and redirects to /dashboard, or to /login?error=google if anything failed. Both endpoints answer 503 when the server has no Google credentials, and googleLoginEnabled in /auth/config tells you that before you send anyone anywhere.

Scopes

Each scope grants one area, split by whether it reads or writes. Give a key both halves only when it needs both.

Errors and refusals

Every error is a status plus a sentence written for the person reading it. A refusal is not a failure: a publish that would use a banned word, a sweep that would overspend the SerpApi allowance, and an action awaiting approval all answer with what happened and what to do about it.

Examples

curl -X POST "$API_URL/apps/$APP_ID/changelogs" \
  -H "Authorization: Bearer lm_..." \
  -H "Content-Type: application/json" \
  -d '{"title": "v1.2.0", "content": "## New\n- Dark mode", "tags": ["NEW"]}'

# Preview what would happen without publishing anything.
curl -X POST "$API_URL/apps/$APP_ID/social/schedule" \
  -H "Authorization: Bearer lm_..." \
  -H "Content-Type: application/json" \
  -d '{
    "items": [{"channelId": "CHANNEL_ID", "text": "We just shipped dark mode!"}],
    "postType": "schedule",
    "scheduledAt": "2026-08-02T09:00:00Z",
    "dryRun": true
  }'

Endpoint reference

Filter by path, description, scope or method. Open an endpoint for the scope it needs and the MCP tool it mirrors.