GraphQL
Build product, inventory, order, and operations screens over the same command-backed graph the console uses.
Explore GraphQLDevelopers
GraphQL for reads and writes. MCP for AI agents. A first-party CLI for inspection. Every action leaves a receipt you can replay. Build once and reuse the same shape across surfaces.
Reference system
Surfaces
Build product, inventory, order, and operations screens over the same command-backed graph the console uses.
Explore GraphQLGive trusted agents typed tools for reads, previews, approvals, and governed actions without screen scraping.
Explore MCPUse `kf` for terminal inspection, local bootstrap bundles, focused operator workflows, and receipt-friendly JSON.
Open CLI guideState changes enter as typed commands with policy, idempotency, events, and receipts attached.
See command modelSubscribe downstream systems to signed operational events with retries, redrive, and audit evidence.
Verify webhooksConnect external and first-party agents through the same API, MCP, approval, and receipt boundaries as people.
Explore agentsControls
Open the GraphiQL v4 surface wired for the configured read-only endpoint. Until that endpoint is published for your cell, use it alongside the static reference.
Open explorerVisual graph of every entity, query, mutation, and type. It introspects the configured endpoint when available and falls back gracefully when the endpoint is offline.
Open schema mapSource and Destination connector packages share manifest, RBAC, rate limits, and audit. Build one, inherit the rest.
Open connector surfaceCanonical KarmanFlow correlation IDs, W3C trace context, GraphQL reports, MCP reports, and partner header rules.
Open trace guideHigh-risk actions bind approval context before execution. Every command leaves a typed receipt you can replay.
Open approvals surfaceEvery domain event is named, versioned, and registered. Webhooks and the relay subscribe to the same catalog.
Open event catalogDocumented .well-known/ucp discovery with standard dev.ucp catalog aliases, canonical cart and checkout model coverage, extension UI metadata, and tenant-bound signatures for preview cells that enable it.
Open UCP surfaceHMAC-SHA256 signed deliveries with replay protection, idempotent webhook-id, 8-attempt fixed backoff, secret rotation with overlap, and ReplayWebhookDelivery for redrive.
Open webhooks surfaceHosted docs
Get started
The quickstart walks through access, tenant setup, seeded demo data, and your first inspection through the CLI. The shape mirrors the hosted preview environment.
This controls app-managed marketing analytics: cookie-free Plausible, optional Cloudflare Web Analytics, and first-party event logs with session-only UTM attribution. The site works without it.
Read the privacy notice