Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Clerion Discovery API
version: 1.0.0
summary: Website intelligence for AI founders.
description: 'The HTTP surface of Clerion that a customer''s own systems call. Analytics are read through the MCP server at /mcp, which serves the same aggregates the dashboard shows and can change or delete nothing. Deploys are recorded with one POST from CI. Visitor rows are never exposed: every figure is an aggregate.'
termsOfService: https://getclerion.com/terms
contact:
name: Clerion
url: https://getclerion.com/contact
email: hello@getclerion.com
servers:
- url: https://api.getclerion.com
tags:
- name: Discovery
description: OAuth 2.1 metadata for MCP clients (RFC 9728, RFC 8414).
paths:
/.well-known/oauth-protected-resource:
get:
operationId: getProtectedResourceMetadata
tags:
- Discovery
summary: Protected resource metadata (RFC 9728)
description: Which authorization server issues tokens for /mcp and which scopes exist.
responses:
'200':
description: RFC 9728 document.
content:
application/json:
schema:
type: object
additionalProperties: true
/.well-known/oauth-authorization-server:
get:
operationId: getAuthorizationServerMetadata
tags:
- Discovery
summary: Authorization server metadata (RFC 8414)
description: 'Endpoints for a public client: authorization code with PKCE (S256), dynamic client registration, no client secret.'
responses:
'200':
description: RFC 8414 document.
content:
application/json:
schema:
type: object
additionalProperties: true
components:
securitySchemes:
clerionKey:
type: http
scheme: bearer
description: The account key from the dashboard, under Your model. Replacing the key there revokes it everywhere.
oauth:
type: oauth2
description: 'OAuth 2.1 for MCP clients: authorization code with PKCE, dynamic client registration at /oauth/register. Discover it at /.well-known/oauth-authorization-server.'
flows:
authorizationCode:
authorizationUrl: https://api.getclerion.com/oauth/authorize
tokenUrl: https://api.getclerion.com/oauth/token
scopes:
analytics:read: Read aggregate analytics for the sites on the account. Nothing can be changed or deleted.
externalDocs:
description: Clerion docs
url: https://getclerion.com/docs