Getting started
Base URL
Every path below is relative to:
https://latea.strangeskills.com/api
Authentication
Create a key in the dashboard under /dashboard/latea/settings/apikeys, then send it in the apikey header on every request:
curl 'https://latea.strangeskills.com/api/users/apikeys' \
-H 'apikey: YOUR_API_KEY'
Three properties of a key matter before you build against it:
- A key belongs to one organization. Every request is scoped to that organization's data. There is no cross-organization or account-wide key.
- A key belongs to one product. A Latea key is refused with
app_not_allowed on another product's endpoints, and with app_not_enabled if the organization has not enabled Latea. - A key can be read-only. A read-only key answers
GET, HEAD and OPTIONS and returns read_only_key on anything that writes — the safer key to hand to a script or an assistant.
The dashboard authenticates with a session cookie instead, which is why operations below list both schemes. For an integration, the API key is the one you want.
Errors
Errors come back as JSON, with the HTTP status repeated in the body:
{ "statusCode": 403, "code": "read_only_key", "message": "Read-only API key" }
| Status | Code | Meaning |
|---|
400 | validation | The request body or query does not match the schema. |
401 | unauthorized | No API key or session, or the key does not exist. |
403 | forbidden | The key is valid but not allowed to perform this operation. |
403 | read_only_key | A read-only key attempted a write. |
403 | app_not_enabled | The organization does not have this product enabled. |
403 | app_not_allowed | The key belongs to a different product. |
404 | not_found | No such route, or no such record in this organization. |
500 | internal | Unexpected server error. |
Model Context Protocol
The same key authenticates an MCP endpoint, so an assistant can drive Latea directly instead of composing HTTP calls. It speaks Streamable HTTP and offers the operations below as tools, filtered to what the key is allowed to do:
https://latea.strangeskills.com/mcp
Authorization: Bearer YOUR_API_KEY