BugTape API

BugTape API as documented publicly: 87 operations. Contract generated from the documentation by API Evangelist (2026-11-03); not the provider's own document.

Operations 87

GET /.well-known/oauth-authorization-server Server metadata (RFC 8414). #
GET /.well-known/oauth-protected-resource/mcp Resource metadata (RFC 9728): resource https://app.bugtape.ai/mcp , authorization server https://app.bugtape.ai #
GET /claims Query projectId , issueId ; returns {claim}. #
POST /claims Create a claim (fenced lease) #
POST /claims/complete Closes work; does not verify the issue. #
POST /claims/release Release a claim lease #
POST /claims/renew Renew a claim lease #
POST /devices Register a new device. #
POST /devices/revoke Revoke a device enrollment. #
GET /enrollment Public enrollment metadata only. #
POST /mcp MCP endpoint (requires a valid agent token) #
GET /oauth/authorize Authorization code + PKCE endpoint. #
POST /oauth/device_authorization Device code (RFC 8628), for BugTape's own CLI only #
POST /oauth/register Dynamic client registration (RFC 7591), public clients only. #
POST /oauth/revoke Revokes a refresh token's grant, or an OAuth-issued access token #
POST /oauth/token OAuth token endpoint supporting authorization_code, refresh_token, and device_code grants #
POST /runners Register a new runner. #
POST /runners/revoke Revoke a runner. #
POST /v1/applications/projects/{projectid}/{applicationid}/builds Register the tested build through the human manager/admin application registry. #
GET /v1/auth/agent-context Return the PAT workspace context. #
POST /v1/auth/api-key-session Retired endpoint; always returns 410. #
GET /v1/auth/approval/{token} Validate an approval link token without consuming it. #
POST /v1/auth/complete-signup Consume an approval link token and materialize the user. #
POST /v1/auth/forgot-password Request a password‑reset email. #
POST /v1/auth/invitations/accept Accept an invitation and create an account. #
POST /v1/auth/invitations/inspect Inspect an invitation token without consuming it. #
POST /v1/auth/login Authenticate with email + password. #
GET /v1/auth/me Return the authenticated user and memberships. #
POST /v1/auth/refresh Exchange a current version2 refresh token for a fresh access token + refresh token. #
POST /v1/auth/register Open self‑serve signup. #
POST /v1/auth/resend-verification Public variant of send‑verification; always returns 200. #
POST /v1/auth/reset-password Consume a password‑reset token and set a new password. #
POST /v1/auth/send-verification Issue a fresh email‑verification token for the current user. #
GET /v1/auth/signup-codes/{code} Check an invite code before signup. #
POST /v1/auth/verify-email Consume an email‑verification token and mark the owning user as verified. #
GET /v1/auth/whats-new Summarize activity since the user's last_login for the currently‑scoped org. #
GET /v1/bugs List grouped bugs for the organization, with per‑bug reporter/occurrence aggregates. #
DELETE /v1/bugs/{id} Permanently delete a bug and all cascading data. #
GET /v1/bugs/{id} Get bug details; includes nullable active_verification_promotion_id. #
PATCH /v1/bugs/{id} Update a single bug's status, severity, assignment, and/or append a note to status history. #
POST /v1/bugs/{id}/analyze Deep AI analysis of a bug and up to 500 of its events. #
GET /v1/bugs/{id}/anomalies Heuristic anomaly detection over the bug's events (error cascades, failed-request storms, timeout cascades, rage clicks, auth-refresh loops, request loops, console-error floods, co #
GET /v1/bugs/{id}/comments List comments for a bug, oldest first. #
POST /v1/bugs/{id}/comments Add a comment to a bug. Auto-subscribes the commenter. #
GET /v1/bugs/{id}/events Fetch bug events, optionally filtered by type and/or occurrence. #
POST /v1/bugs/{id}/events/{eventid}/ai AI assessment of a single event. #
GET /v1/bugs/{id}/history Status-change audit trail, newest first. #
GET /v1/bugs/{id}/occurrences List individual occurrences grouped under a bug. #
GET /v1/bugs/{id}/similar Find related bugs by fingerprint-prefix match and title-word overlap, scored out of 100 and returned top-5. #
DELETE /v1/bugs/{id}/watch Unsubscribe the current user. #
POST /v1/bugs/{id}/watch Subscribe the current user to this bug's notifications. #
GET /v1/bugs/{id}/watching Returns whether the current user watches this bug. #
GET /v1/bugs/groups/{groupkey}/instances List instances (bugs) belonging to a specific group. #
POST /v1/bugs/manual Create a bug manually from the console (tester / admin flows). #
POST /v1/bugs/merge Merge up to 20 source bugs into a target bug. #
GET /v1/bugs/reporters/{email}/bugs All bugs reported by a specific email address. #
GET /v1/evidence/capabilities Check evidence capabilities before attempting evidence transfer. #
POST /v1/evidence/projects/{projectid}/artifacts Reserve a measured log artifact for upload. #
GET /v1/evidence/projects/{projectid}/artifacts/{artifactid} Inspect ready metadata of an artifact. #
PUT /v1/evidence/projects/{projectid}/artifacts/{artifactid}/content Upload exact bytes for a reserved artifact. #
POST /v1/growth/hit Marketing beacon hit endpoint. #
POST /v1/growth/snapshots/import Owner Lighthouse import of snapshots. #
GET /v1/health Verifies the API process and a cheap PostgreSQL ping. #
GET /v1/health/deep Deep health check with optional token for detailed diagnostics. #
POST /v1/ingest POST /v1/ingest #
POST /v1/ingest/ai-summary Serve AI‑generated summary for an ingest payload. #
POST /v1/ingest/presence Presence beacon — lightweight upsert of "this session is currently on this page" into the live_presence table. #
GET /v1/oauth/device/{usercode} Retrieve device authorization details by user code #
GET /v1/oauth/requests/{id} Consent page request for an OAuth authorization request #
POST /v1/oauth/requests/{id}/approve Approve an OAuth request #
POST /v1/oauth/requests/{id}/deny Deny an OAuth request #
GET /v1/org/agent-pats Lists token metadata, project grants and an opaque accessRevision; it never returns secrets. #
POST /v1/org/agent-pats Creates a token and returns its secret once. #
DELETE /v1/org/agent-pats/{id} Revokes the credential. #
PATCH /v1/org/agent-pats/{id} Changes scopes, expiresAt and/or projectGrants of an existing agent PAT. #
GET /v1/projects List projects for the caller's org, with bug counts. #
POST /v1/projects Create a project. #
GET /v1/projects/{id}/keys List a project's API keys. #
POST /v1/projects/{id}/keys Generate a new API key for a project. #
DELETE /v1/projects/{id}/keys/{keyid} Soft-delete (revoke) an API key. #
POST /v1/projects/capture-setup Setup capture for a project #
GET /v1/team List the current org's team members with their notification preferences. #
POST /verification/challenges Submit verification challenge. #
POST /verification/promote Promote verification receipt and complete claim. #
POST /verification/receipts Submit exact measured verification receipt. #
GET /verification/receipts/{receiptid} Read verification receipt status and applicability. #
GET /verification/receipts/{receiptid}/evidence Request evidence metadata only; contentAvailable:false. #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/bugtape-ai:bugtape-ai-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

bugtape-ai-openapi-generated.yml Raw ↑
openapi: 3.1.0
info:
  title: BugTape API
  version: '2026-11-03'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-11-03: 87 operation(s) read from 1 public documentation page(s) (each operation
    names its page in x-source). This is not the provider''s published contract; BugTape has published no machine-readable contract that the pipeline
    could find. Engine: local.'
  x-evidence-tiers:
    code-example: 0
    documentation: 87
    pages-with-code: 0
    pages-read: 1
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-11-03'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:
  - https://bugtape.ai/docs/api-reference
servers:


# --- truncated at 32 KB (86 KB total) ---
# Full source: https://artifacts.apis.io/bugtape-ai/openapi/_ae-authored/bugtape-ai-openapi-generated.yml