API reference

The web app and the MCP server both run on this API, so anything you can do on screen you can script. The reference below is rendered from the OpenAPI document that changes in the same commit as the routes.

Base URL

https://api.nothingleft.dev, and every path starts with /v1.

Authentication

In the browser, the session cookie you get when you sign in. From scripts and agents, a personal access token sent as Authorization: Bearer nl_pat_…, created under Settings → Access tokens. A token reaches every organisation you belong to; send X-Organization: <slug> to choose one.

Responses

JSON in one envelope: data and meta on success, error on failure, never both. Errors carry a stable code, plus the field and its valid_values when the input was wrong.

Identifiers

The names you see on screen, never an internal ID: issue keys like ACME-42, usernames, status names like In Progress.

curl https://api.nothingleft.dev/v1/issues/ACME-42 \
  -H "Authorization: Bearer $NOTHINGLEFT_TOKEN"