Gummble core API

openapi: 3.1.0
info:
  title: Gummble core API
  version: '2026-11-11'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-11-11: 7 operation(s) read from 2 public documentation page(s) (each operation
    names its page in x-source). This is not the provider''s published contract; Gummble has published no machine-readable contract that the pipeline
    could find. Engine: local.'
  x-evidence-tiers:
    code-example: 9
    documentation: 10
    pages-with-code: 7
    pages-read: 11
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-11-11'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:
  - https://docs.gummble.com/docs/api
  - https://docs.gummble.com/docs/authentication
  x-docs-section: core
servers:
- url: https://api.gummble.com
paths:
  /.well-known/jwks.json:
    get:
      operationId: get_well_known_jwks_json
      tags:
      - API
      summary: Public signing keys
      x-source: https://docs.gummble.com/docs/authentication
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /.well-known/oauth-authorization-server:
    get:
      operationId: get_well_known_oauth_authorization_server
      tags:
      - API
      summary: GET /.well-known/oauth-authorization-server
      x-source: https://docs.gummble.com/docs/authentication
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: 'curl https://api.gummble.com/.well-known/oauth-authorization-server | jq '
  /apps:
    get:
      operationId: get_apps
      tags:
      - Apps
      summary: Browse the app catalogue.
      description: All collection endpoints use cursor‑based pagination and return a JSON object with a `data` array and optional `pagination`
        object.
      x-source: https://docs.gummble.com/docs/api
      parameters:
      - name: limit
        in: query
        required: false
        schema:
          type: string
        description: Maximum number of items to return (default 20, max 100).
      - name: cursor
        in: query
        required: false
        schema:
          type: string
        description: Cursor for pagination, obtained from previous response.
      - name: category
        in: query
        required: false
        schema:
          type: string
        description: Filter by app category; repeat key to OR‑combine multiple categories.
      - name: platform
        in: query
        required: false
        schema:
          type: string
        description: Filter by platform (e.g., ios); repeat key to OR‑combine multiple platforms.
      responses:
        '200':
          description: Success (status as documented)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetAppsResponse'
      x-evidence:
        kind: documentation
  /oauth/authorize:
    get:
      operationId: get_oauth_authorize
      tags:
      - Oauth
      summary: Authorization code
      x-source: https://docs.gummble.com/docs/authentication
      parameters:
      - name: response_type
        in: query
        required: true
        schema:
          type: string
      - name: client_id
        in: query
        required: true
        schema:
          type: string
      - name: redirect_uri
        in: query
        required: true
        schema:
          type: string
      - name: state
        in: query
        required: false
        schema:
          type: string
      - name: code_challenge
        in: query
        required: false
        schema:
          type: string
      - name: code_challenge_method
        in: query
        required: false
        schema:
          type: string
      - name: resource
        in: query
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /oauth/register:
    post:
      operationId: post_oauth_register
      tags:
      - Oauth
      summary: POST /oauth/register
      x-source: https://docs.gummble.com/docs/authentication
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostOauthRegisterRequest'
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -X POST https://api.gummble.com/oauth/register  -H 'content-type: application/json'  -d '{ \n \"client_name\": \"My App\"\
          , \n \"redirect_uris\": [\"http://127.0.0.1:8080/callback\"], \n \"application_type\": \"native\", \n \"token_endpoint_auth_method\"\
          : \"none\" \n }' "
  /oauth/revoke:
    post:
      operationId: post_oauth_revoke
      tags:
      - Oauth
      summary: Revocation
      x-source: https://docs.gummble.com/docs/authentication
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
  /oauth/token:
    post:
      operationId: post_oauth_token
      tags:
      - Oauth
      summary: POST /oauth/token
      x-source: https://docs.gummble.com/docs/authentication
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl -X POST https://api.gummble.com/oauth/token  -d \"grant_type=authorization_code\"  -d \"code=...\"  -d \"client_id=...\"\
          \  -d \"redirect_uri=...\"  -d \"code_verifier=...\"  -d \"resource=https://mcp.gummble.com/mcp\" \n Token lifetimes \n Token Lifetime\
          \ Algorithm Access (API) 1 day HS256 Access (MCP) 15 minutes RS256 Refresh 30 days, rotating opaque \n Refresh tokens are single-use\
          \ with reuse detection. If "
security:
- bearer: []
components:
  schemas:
    GetAppsResponse:
      type: object
      properties:
        data:
          type: array
          description: Array of app objects.
        pagination:
          type: object
          description: Pagination info (present when results are paginated).
    PostOauthRegisterRequest:
      type: object
      properties:
        client_name:
          type: string
        redirect_uris:
          type: array
          items:
            type: string
        application_type:
          type: string
        token_endpoint_auth_method:
          type: string
  securitySchemes:
    bearer:
      type: http
      scheme: bearer
tags:
- name: API
- name: Apps
- name: Oauth