# BugTape API

**Canonical:** https://apis.io/apis/bugtape-ai/bugtape-ai-api/  
**Provider:** BugTape — https://apis.io/providers/bugtape-ai/  
**Base URL:** https://app.bugtape.ai  
**Documentation:** https://bugtape.ai/docs/api-reference

BugTape API is one of 2 APIs that [BugTape](https://apis.io/providers/bugtape-ai/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. The published artifact set on APIs.io includes an OpenAPI specification and 6 JSON Schemas.

BugTape API as documented publicly: 87 operations. Contract generated from the documentation by API Evangelist (2026-11-03); not the provider's own document.

## Operations (60 of 87)

| Method | Path | Summary |
|---|---|---|
| GET | `/.well-known/oauth-authorization-server` | Server metadata (RFC 8414). |
| GET | `/.well-known/oauth-protected-resource/mcp` | Resource metadata (RFC 9728): resource https://app.bugtape.ai/mcp , authorization server https://app.bugtape.ai |
| GET | `/claims` | Query projectId , issueId ; returns {claim}. |
| POST | `/claims` | Create a claim (fenced lease) |
| POST | `/claims/complete` | Closes work; does not verify the issue. |
| POST | `/claims/release` | Release a claim lease |
| POST | `/claims/renew` | Renew a claim lease |
| POST | `/devices` | Register a new device. |
| POST | `/devices/revoke` | Revoke a device enrollment. |
| GET | `/enrollment` | Public enrollment metadata only. |
| POST | `/mcp` | MCP endpoint (requires a valid agent token) |
| GET | `/oauth/authorize` | Authorization code + PKCE endpoint. |
| POST | `/oauth/device_authorization` | Device code (RFC 8628), for BugTape's own CLI only |
| POST | `/oauth/register` | Dynamic client registration (RFC 7591), public clients only. |
| POST | `/oauth/revoke` | Revokes a refresh token's grant, or an OAuth-issued access token |
| POST | `/oauth/token` | OAuth token endpoint supporting authorization_code, refresh_token, and device_code grants |
| POST | `/runners` | Register a new runner. |
| POST | `/runners/revoke` | Revoke a runner. |
| POST | `/v1/applications/projects/{projectid}/{applicationid}/builds` | Register the tested build through the human manager/admin application registry. |
| GET | `/v1/auth/agent-context` | Return the PAT workspace context. |
| POST | `/v1/auth/api-key-session` | Retired endpoint; always returns 410. |
| GET | `/v1/auth/approval/{token}` | Validate an approval link token without consuming it. |
| POST | `/v1/auth/complete-signup` | Consume an approval link token and materialize the user. |
| POST | `/v1/auth/forgot-password` | Request a password‑reset email. |
| POST | `/v1/auth/invitations/accept` | Accept an invitation and create an account. |
| POST | `/v1/auth/invitations/inspect` | Inspect an invitation token without consuming it. |
| POST | `/v1/auth/login` | Authenticate with email + password. |
| GET | `/v1/auth/me` | Return the authenticated user and memberships. |
| POST | `/v1/auth/refresh` | Exchange a current version2 refresh token for a fresh access token + refresh token. |
| POST | `/v1/auth/register` | Open self‑serve signup. |
| POST | `/v1/auth/resend-verification` | Public variant of send‑verification; always returns 200. |
| POST | `/v1/auth/reset-password` | Consume a password‑reset token and set a new password. |
| POST | `/v1/auth/send-verification` | Issue a fresh email‑verification token for the current user. |
| GET | `/v1/auth/signup-codes/{code}` | Check an invite code before signup. |
| POST | `/v1/auth/verify-email` | Consume an email‑verification token and mark the owning user as verified. |
| GET | `/v1/auth/whats-new` | Summarize activity since the user's last_login for the currently‑scoped org. |
| GET | `/v1/bugs` | List grouped bugs for the organization, with per‑bug reporter/occurrence aggregates. |
| DELETE | `/v1/bugs/{id}` | Permanently delete a bug and all cascading data. |
| GET | `/v1/bugs/{id}` | Get bug details; includes nullable active_verification_promotion_id. |
| PATCH | `/v1/bugs/{id}` | Update a single bug's status, severity, assignment, and/or append a note to status history. |
| POST | `/v1/bugs/{id}/analyze` | Deep AI analysis of a bug and up to 500 of its events. |
| GET | `/v1/bugs/{id}/anomalies` | Heuristic anomaly detection over the bug's events (error cascades, failed-request storms, timeout cascades, rage clicks, auth-refresh loops, request loops, c... |
| GET | `/v1/bugs/{id}/comments` | List comments for a bug, oldest first. |
| POST | `/v1/bugs/{id}/comments` | Add a comment to a bug. Auto-subscribes the commenter. |
| GET | `/v1/bugs/{id}/events` | Fetch bug events, optionally filtered by type and/or occurrence. |
| POST | `/v1/bugs/{id}/events/{eventid}/ai` | AI assessment of a single event. |
| GET | `/v1/bugs/{id}/history` | Status-change audit trail, newest first. |
| GET | `/v1/bugs/{id}/occurrences` | List individual occurrences grouped under a bug. |
| GET | `/v1/bugs/{id}/similar` | Find related bugs by fingerprint-prefix match and title-word overlap, scored out of 100 and returned top-5. |
| DELETE | `/v1/bugs/{id}/watch` | Unsubscribe the current user. |
| POST | `/v1/bugs/{id}/watch` | Subscribe the current user to this bug's notifications. |
| GET | `/v1/bugs/{id}/watching` | Returns whether the current user watches this bug. |
| GET | `/v1/bugs/groups/{groupkey}/instances` | List instances (bugs) belonging to a specific group. |
| POST | `/v1/bugs/manual` | Create a bug manually from the console (tester / admin flows). |
| POST | `/v1/bugs/merge` | Merge up to 20 source bugs into a target bug. |
| GET | `/v1/bugs/reporters/{email}/bugs` | All bugs reported by a specific email address. |
| GET | `/v1/evidence/capabilities` | Check evidence capabilities before attempting evidence transfer. |
| POST | `/v1/evidence/projects/{projectid}/artifacts` | Reserve a measured log artifact for upload. |
| GET | `/v1/evidence/projects/{projectid}/artifacts/{artifactid}` | Inspect ready metadata of an artifact. |
| PUT | `/v1/evidence/projects/{projectid}/artifacts/{artifactid}/content` | Upload exact bytes for a reserved artifact. |

…and 27 more operations. They are listed in full on the page.

## Machine-readable artifacts (7)

- **OpenAPI** — https://artifacts.apis.io/bugtape-ai/openapi/_ae-authored/bugtape-ai-openapi-generated.yml
- **JSONSchema** — https://artifacts.apis.io/bugtape-ai/json-schema/bugtape-ai-post-v1-ingest-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/bugtape-ai/json-schema/bugtape-ai-post-v1-ingest-presence-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/bugtape-ai/json-schema/bugtape-ai-post-claims-complete-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/bugtape-ai/json-schema/bugtape-ai-post-v1-ingest-response-schema.json
- **JSONSchema** — https://artifacts.apis.io/bugtape-ai/json-schema/bugtape-ai-post-devices-request-schema.json
- **JSONSchema** — https://artifacts.apis.io/bugtape-ai/json-schema/bugtape-ai-post-verification-promote-request-schema.json

## Other BugTape APIs (1)

- [BugTape API](https://apis.io/apis/bugtape-ai/bugtape-api/)

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/bugtape-ai/bugtape-ai-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/bugtape-ai/.