Public API

API catalog

Elution Labs builds intelligent systems that businesses own. We design and deploy them around how the work already runs, so the job gets finished and the advantage stays theirs.

This page documents the public discovery endpoints and the Zapier partner API routes, plus the machine-readable discovery documents published for agents. Admin, client portal, and assessment APIs are private and are omitted here.

Public endpoints

No API key. No OAuth.

  • GET /api/health — liveness. Returns { "status": "ok" }.
  • GET /api/public/overview — mission, public page URLs, and pointers to the machine documents below. No personal data.
  • GET /mcp — public MCP server card: server name, protocol version, and the HTTP transport endpoint. No authentication.
  • POST /mcp — public MCP tools: company overview, the public page list, and the human intake URL. No authentication.

Machine documents

  • OpenAPI — machine spec for GET /api/health and GET /api/public/overview. Partner routes are documented on this page.
  • Discovery linkset — RFC 9727 linkset for unauthenticated discovery: OpenAPI, this page, and GET /api/health. It does not include /mcp or the Zapier partner routes.
  • llms.txt
  • auth.md — agent auth notes. Elution Labs does not issue self-serve OAuth tokens.
  • MCP server card — same card as GET /mcp.
  • Agent skills index — public skills discovery index.
  • AI catalog — capability manifest for agents.
  • OAuth protected resource — resource metadata. No agent token issuance.
  • OAuth authorization server — authorization-server metadata. No agent token issuance.
  • OpenID configuration — same document as the authorization-server metadata.
  • JWKS — empty key set. This origin does not issue agent tokens.
  • POST /.well-known/oauth/token — returns unauthorized_client (400). No agent tokens. GET on this path returns the same response.

Partner — Zapier

The Elution Labs Zapier integration creates an intake in Elution Labs, and reacts when a new intake is created from your account. These are the only partner routes.

Authentication is a per-account API key issued by Elution Labs. Each key belongs to one account and only sees intakes created with that key. To get a key, email support@elutionlabs.ai from your company address. We send it over a secure channel, and can revoke it at any time.

Send Authorization: Bearer <key>, X-API-KEY: <key> (Zapier Platform default), or x-zapier-inbound-key: <key>. A missing, unknown, or revoked key returns 401. If key lookup is temporarily unavailable, the response is 503.

  • GET /api/integrations/zapier/me — connection test. Returns your key's id and account label: { "id": "…", "name": "Your account label" }
  • GET /api/integrations/zapier/intakes — newest intakes created with your key. Optional limit query (default 25, maximum 100). JSON array of id, company_name, industry, contact_email, and submitted_at.
  • POST /api/integrations/zapier/intakes — create an intake. Body matches the public assessment form: company, contact, industry, compliance, and data-layer questions.

The same partner routes are also published on the Zapier partner page.

For people

People start at the assessment intake. Agents should send humans to that page.