Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: Luna Account API
description: 'Luna is a baby tracker for feeds, sleep, nappies, solids and routines, shared between parents and invited caregivers.
This REST API is the same one the Luna web app uses. Every request is scoped to **one family**: the family is resolved from the bearer token (or session cookie) and there is no way to address another family''s data.
## Authentication
* **Bearer token** (`Authorization: Bearer `), the way agents and scripts should call the API. Create one in the app (Settings → Connect an assistant) or `POST /api/vega/token` from a signed-in session. Tokens are stored hashed and can carry `read` or `read`+`write` scopes. A `read` token may call every `GET` (and `HEAD`) route plus `POST /api/ask` (asking only; a `remember:` question saves a note and needs `write`). Any other `POST`, `PUT`, `PATCH` or `DELETE` with a token that lacks `write` returns `403 {"error": "insufficient_scope", "required_scope": "write"}`. Each operation''s `x-required-scope` says which it needs.
* **Session cookie** (`luna_session`), what the browser uses after `POST /login` or `POST /api/vega/onboard`.
Only `GET /api/health` and `POST /api/vega/onboard` are reachable without credentials. Unauthenticated calls to anything else return `401 {"error": "unauthorized"}`.
## Conventions
* Timestamps are ISO 8601 in the family''s local time (`YYYY-MM-DDTHH:MM:SS`); omit `ts` to log "now". Future timestamps are rejected.
* Volumes are millilitres, weights kilograms, lengths centimetres. Families with `units: imperial` still store metric.
* Errors are JSON `{"error": ""}` with a 4xx status.
* Luna is not a medical device: nothing here diagnoses, assesses symptoms or advises on medication.
## Other ways in
* **MCP connector** at `https://getmyluna.app/mcp` (streamable HTTP; OAuth sign-in, or the same bearer token): 23 tools, resources and prompts for Meta Muse, Claude Code and any MCP client. Manifest: `/.well-known/luna-connector.json`.
* **Agent instructions**: `/llms.txt`. **Developer portal**: `/developers`. **CLI**: `/cli/luna.py`.'
termsOfService: https://getmyluna.app/terms
contact:
name: Luna support
url: https://getmyluna.app/contact
email: hello@getmyluna.app
version: 1.1.0
servers:
- url: https://getmyluna.app
description: Production
tags:
# --- truncated at 32 KB (33 KB total) ---
# Full source: https://artifacts.apis.io/getmyluna-app/openapi/getmyluna-app-account-api-openapi.yml