Developers · Hormaz Daruwala

Developer portal

Everything an AI agent or developer needs to integrate with hormazdaruwala.vercel.app: a public read-only REST API, a typed OpenAPI specification, a Streamable HTTP MCP server, an NLWeb ask endpoint, sandbox documentation, and WorkOS auth.md agent authentication. No API key is needed for reads. All GET endpoints are CORS-open, rate-limited to a generous demo quota, and return structured JSON errors with codes, messages, and resolution hints instead of HTML error pages.

Quickstart

1. Fetch GET /api/profile for identity, roles, and availability.
2. Fetch GET /api/projects?type=client&q=next for filtered work.
3. Read /openapi.json for the full typed schema with operationIds.
4. Try the sandbox: GET /api/sandbox describes the test environment.
5. For agents: read /llms.txt, then /auth.md, then call MCP at /api/mcp.

Resources

• OpenAPI spec (/openapi.json)
• API docs (/docs)
• Sandbox (/api/sandbox)
• Agent auth walkthrough (/auth.md)
• A2A agent card
• MCP server card
• Public source repo with AGENTS.md

Authentication

Public GET endpoints need no credentials. Authenticated entry points (/api, /api/v1, /agent/identity) return 401 with WWW-Authenticate: Bearer resource_metadata="...oauth-protected-resource" so agents learn auth requirements from one request. Agent credential flow (anonymous, identity_assertion with ID-JAG, or service_auth) is documented in /auth.md with reachable identity, claim, and events endpoints. Self-serve a free demo key with POST /api/agent/key (free tier: all reads are keyless, no signup).

Versioning, limits, retries

URL-path versioning (/api/* v1 current, mirrored at /api/v1/*), API-Version + Deprecation headers, 12-month Sunset policy. Demo rate limit 60 req/min via RateLimit-* headers. Retries are safe: send Idempotency-Key on POST writes. Paginate lists with limit/cursor; bulk reads via POST /api/batch; poll long work at GET /api/jobs/{id}. Sandbox guide: /sandbox.