wakato-io

wakato-io Apps API

The Apps API from wakato-io — 7 operation(s) for apps.

GitHub OpenAPI

Operations 9

GET /apps List apps #
POST /apps Create an agent-authored app #
GET /apps/capabilities Discover usable models/services + capability keys #
GET /apps/{id} Get an app (incl. ui_code) #
PATCH /apps/{id} Update an app's code/schema #
POST /apps/{id}/model Define a data model on the app #
POST /apps/{id}/preview Dry-run validate an app #
GET /apps/{id}/logs Read recent app runtime/SDK errors #
POST /apps/{id}/publish Publish an app into the space #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/wakato-io/openapi/wakato-io-apps-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/wakato-io:wakato-io-apps-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

wakato-io-apps-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Wakato Space Apps API
  version: 1.0.0
  description: 'The **Wakato Space API** lets an external agent or tool (Claude Code, Cursor,

    Zapier, a partner integration, your own scripts) operate a single Wakato

    **Space** using a scoped Bearer token (a *Space API key*, `wks_live_…`).


    The **same token** works two ways:

    - **REST** — the endpoints documented here (`/functions/v1/space-api/…`).

    - **MCP** — a Model Context Protocol server at `/functions/v1/space-mcp`

    that exposes the same operations as tools to MCP clients. MCP clients

    self-discover the tools via `tools/list`; see the Quickstart to connect.


    ### Authentication

    Send the key as a Bearer token: `Authorization: Bearer wks_live_…`.

    A key is locked to exactly one Space and cannot read or write any other

    Space, the wallet (beyond read), member permissions, or other users.


    ### Scopes

    Every key grants per-domain scopes with up to three actions:

    - `read` — list / inspect

    - `write` — create / edit

    - `run` — the *consequential* action (publish a page, send an SMS, post

    socially, run an automation). Public/billable actions are deliberately

    split into `run` so you grant them explicitly.


    Each operation below notes its required scope via `x-required-scope`.

    A call without the scope returns `403`.


    ### Safety model

    - Wallet, Finance, Integrations are **read-only**. Money is never moved.

    - Secrets returns **names only** — values are never exposed.

    - Social posts and ad campaigns default to **drafts**; going live requires

    the `run` scope. Connecting new OAuth accounts is never done by a key.'
servers:
- url: https://api.wakato.io/functions/v1/space-api
  description: Production
- url: https://pnwxrleocjbcvrrwrycq.supabase.co/functions/v1/space-api
  description: Development
security:
- bearerAuth: []
tags:
- name: Apps
paths:
  /apps:
    get:
      tags:
      - Apps
      summary: List apps
      x-required-scope: apps:read
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      description: '**Required scope:** `apps:read`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X GET \"https://api.wakato.io/functions/v1/space-api/apps\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\""
      operationId: getApps
      x-operation-id-source: derived
    post:
      tags:
      - Apps
      summary: Create an agent-authored app
      x-required-scope: apps:write
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - name
              properties:
                name:
                  type: string
                description:
                  type: string
                ui_code:
                  type: string
                  description: Full HTML (Preact+HTM)
                  uses window.wakato.* SDK: null
                app_schema:
                  type: object
      responses:
        '201':
          $ref: '#/components/responses/Created'
      description: '**Required scope:** `apps:write`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X POST \"https://api.wakato.io/functions/v1/space-api/apps\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n  \"name\": \"Launch plan\"\n}'"
      operationId: postApps
      x-operation-id-source: derived
  /apps/capabilities:
    get:
      tags:
      - Apps
      summary: Discover usable models/services + capability keys
      x-required-scope: apps:read
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      description: '**Required scope:** `apps:read`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X GET \"https://api.wakato.io/functions/v1/space-api/apps/capabilities\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\""
      operationId: getAppsCapabilities
      x-operation-id-source: derived
  /apps/{id}:
    parameters:
    - in: path
      name: id
      required: true
      schema:
        type: string
    get:
      tags:
      - Apps
      summary: Get an app (incl. ui_code)
      x-required-scope: apps:read
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      description: '**Required scope:** `apps:read`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X GET \"https://api.wakato.io/functions/v1/space-api/apps/b7e4a1c2-9d3f-4e8a-b2c1-5f6d7e8a9b0c\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\""
      operationId: getAppsById
      x-operation-id-source: derived
    patch:
      tags:
      - Apps
      summary: Update an app's code/schema
      x-required-scope: apps:write
      requestBody:
        content:
          application/json:
            schema:
              type: object
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      description: '**Required scope:** `apps:write`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X PATCH \"https://api.wakato.io/functions/v1/space-api/apps/b7e4a1c2-9d3f-4e8a-b2c1-5f6d7e8a9b0c\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{}'"
      operationId: patchAppsById
      x-operation-id-source: derived
  /apps/{id}/model:
    parameters:
    - in: path
      name: id
      required: true
      schema:
        type: string
    post:
      tags:
      - Apps
      summary: Define a data model on the app
      x-required-scope: apps:write
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                model_key:
                  type: string
                fields:
                  type: object
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      description: '**Required scope:** `apps:write`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X POST \"https://api.wakato.io/functions/v1/space-api/apps/b7e4a1c2-9d3f-4e8a-b2c1-5f6d7e8a9b0c/model\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{}'"
      operationId: postAppsByIdModel
      x-operation-id-source: derived
  /apps/{id}/preview:
    parameters:
    - in: path
      name: id
      required: true
      schema:
        type: string
    post:
      tags:
      - Apps
      summary: Dry-run validate an app
      x-required-scope: apps:read
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      description: '**Required scope:** `apps:read`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X POST \"https://api.wakato.io/functions/v1/space-api/apps/b7e4a1c2-9d3f-4e8a-b2c1-5f6d7e8a9b0c/preview\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\""
      operationId: postAppsByIdPreview
      x-operation-id-source: derived
  /apps/{id}/logs:
    parameters:
    - in: path
      name: id
      required: true
      schema:
        type: string
    get:
      tags:
      - Apps
      summary: Read recent app runtime/SDK errors
      x-required-scope: apps:read
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      description: '**Required scope:** `apps:read`'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X GET \"https://api.wakato.io/functions/v1/space-api/apps/b7e4a1c2-9d3f-4e8a-b2c1-5f6d7e8a9b0c/logs\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\""
      operationId: getAppsByIdLogs
      x-operation-id-source: derived
  /apps/{id}/publish:
    parameters:
    - in: path
      name: id
      required: true
      schema:
        type: string
    post:
      tags:
      - Apps
      summary: Publish an app into the space
      description: '**Required scope:** `apps:run`


        Installs the app. It cannot use any capability until a space admin approves the requested permissions.'
      x-required-scope: apps:run
      responses:
        '200':
          $ref: '#/components/responses/Ok'
      x-codeSamples:
      - lang: bash
        label: cURL
        source: "curl -X POST \"https://api.wakato.io/functions/v1/space-api/apps/b7e4a1c2-9d3f-4e8a-b2c1-5f6d7e8a9b0c/publish\" \\\n  -H \"Authorization: Bearer wks_live_YOUR_TOKEN\""
      operationId: postAppsByIdPublish
      x-operation-id-source: derived
components:
  responses:
    Ok:
      description: Success
      content:
        application/json:
          schema:
            type: object
    Created:
      description: Created
      content:
        application/json:
          schema:
            type: object
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: A Space API key, e.g. `wks_live_…`.