Developers

Build against the contract the operator console uses.

GraphQL for reads and writes. MCP for AI agents. A first-party CLI for inspection. Every action leaves a receipt you can replay. Build once and reuse the same shape across surfaces.

Reference system

Every developer surface resolves to one trusted source.

GraphQLschemaCLIinspectionMCPagent catalogWebhooksdeliveryReceiptsaudit trailllms.txtcrawler entry
Trusted docs surfaceKarmanFlow ReferenceOne contract, cited by humans and agents.
ReferenceExplorerSearch / Ask AIAnalytics
Schemas, CLI docs, MCP catalogs, webhooks, receipts, and llms.txt all point to the same reference surface.

Surfaces

Hosted surfaces, one operating contract.

preview

GraphQL

Build product, inventory, order, and operations screens over the same command-backed graph the console uses.

Explore GraphQL
preview

MCP tools

Give trusted agents typed tools for reads, previews, approvals, and governed actions without screen scraping.

Explore MCP
preview

kf CLI

Use `kf` for terminal inspection, local bootstrap bundles, focused operator workflows, and receipt-friendly JSON.

Open CLI guide
preview

Command registry

State changes enter as typed commands with policy, idempotency, events, and receipts attached.

See command model
preview

Events and webhooks

Subscribe downstream systems to signed operational events with retries, redrive, and audit evidence.

Verify webhooks
preview

Agents

Connect external and first-party agents through the same API, MCP, approval, and receipt boundaries as people.

Explore agents

Controls

Approvals, receipts, and guides stay beside the APIs.

Schema explorer

Open the GraphiQL v4 surface wired for the configured read-only endpoint. Until that endpoint is published for your cell, use it alongside the static reference.

Open explorer

Schema map

Visual graph of every entity, query, mutation, and type. It introspects the configured endpoint when available and falls back gracefully when the endpoint is offline.

Open schema map

Connectors as modules

Source and Destination connector packages share manifest, RBAC, rate limits, and audit. Build one, inherit the rest.

Open connector surface

Traceability

Canonical KarmanFlow correlation IDs, W3C trace context, GraphQL reports, MCP reports, and partner header rules.

Open trace guide

Approvals + receipts

High-risk actions bind approval context before execution. Every command leaves a typed receipt you can replay.

Open approvals surface

Event catalog

Every domain event is named, versioned, and registered. Webhooks and the relay subscribe to the same catalog.

Open event catalog

Universal Commerce Protocol

Documented .well-known/ucp discovery with standard dev.ucp catalog aliases, canonical cart and checkout model coverage, extension UI metadata, and tenant-bound signatures for preview cells that enable it.

Open UCP surface

Webhooks (Standard Webhooks v1)

HMAC-SHA256 signed deliveries with replay protection, idempotent webhook-id, 8-attempt fixed backoff, secret rotation with overlap, and ReplayWebhookDelivery for redrive.

Open webhooks surface

Hosted docs

Reference pages stay aligned with sandbox-proven contracts.

GraphQL, MCP, CLI, webhooks, commands, agents, and skills share one command and receipt boundary.
Hosted references stay aligned with the sandbox-proven contracts, including schema map, explorer, CLI help, trace reports, and webhooks.
Use the quickstart with hosted preview credentials, then move into reference pages for exact flags and payloads.

Get started

Five steps to a working preview tenant.

The quickstart walks through access, tenant setup, seeded demo data, and your first inspection through the CLI. The shape mirrors the hosted preview environment.

Privacy choices

This controls app-managed marketing analytics: cookie-free Plausible, optional Cloudflare Web Analytics, and first-party event logs with session-only UTM attribution. The site works without it.

Read the privacy notice