REST API

Strata is built on a REST API described by an OpenAPI 3.1 specification. Most integrations use the MCP server rather than calling REST directly, but the full spec is available for tooling and custom clients.

Spec

OpenAPI specification

The machine-readable spec is served live and stays in sync with the deployed API. Open it directly, or import it into a viewer like Scalar, Redoc, Postman, or Insomnia:

Open openapi.json

The spec is also advertised for agents and crawlers via /.well-known/api-catalog.

Conventions

Base URL and versioning

Every endpoint lives under /api/v1 on the API host; the path prefix carries the version.

Auth

Authentication

Requests carry a bearer token. Browser sessions use a short-lived access token minted from an HttpOnly refresh cookie; programmatic MCP access uses OAuth 2.1, which handles token issuance and refresh for you.

Reference

Resource areas

The API spans the full Strata domain. The main resource areas:

Documents: CRUD, history, comments, suggestions, access, publishing, images
Spaces: membership, sources, access grants, hybrid search
Companies, organizations, and tiers: the workspace hierarchy
Users and profiles: accounts, memberships, public profiles
Access and sharing: permissions, public links, space grants
Auth and OAuth: sessions, tenant switching, MCP OAuth clients
Agents and tasks: platform and user agent invocation
Admin and compliance: SSO, SCIM, audit, retention, billing

Clients

Generate a client

Point any OpenAPI 3.1 code generator at the spec above to produce a typed client in the language of your choice.

Prefer tools over raw REST? See the MCP Tools Reference.