Developers

Kitbase developer resources

The REST API and its OpenAPI specification, authentication, errors and rate limits, webhooks, the hosted MCP server, the CLI and the SDKs — at predictable URLs, for people and for agents.

/openapi.json api.kitbase.dev/mcp /llms.txt /.well-known/ai-catalog.json

REST API

Kitbase API reference

Endpoints with curl examples: events, identify, server-side crawler ingestion, status codes and rate limits.

docs.kitbase.dev/api-reference

Open →

Kitbase OpenAPI specification

OpenAPI 3.0 document for the public surface — every operation with an operationId, description, typed parameters, response schemas and a typed error model. Also as YAML.

kitbase.dev/openapi.json · api.kitbase.dev/openapi.json

Open → · openapi.yaml

Private API keys (sk_kitbase_…) via Authorization: Bearer or X-API-Key, SDK keys (pk_kitbase_…) for ingestion, user sessions for the dashboard and CLI. Keys carry the permissions of the user who created them, scoped to one project.

docs.kitbase.dev/api-reference#authentication

Open →

Errors, rate limits, versioning

One JSON error envelope with a stable machine-readable code, RateLimit / X-RateLimit headers on every response, Retry-After on 429, and a deprecation policy with Deprecation + Sunset headers.

docs.kitbase.dev/api-reference#http-status-codes

Open →

Webhooks

Subscribe to every system event with HMAC-signed HTTP callbacks (X-Webhook-Signature); manage subscriptions from the dashboard, the CLI (kitbase webhooks) or the Webhooks operations in the OpenAPI spec.

kitbase webhooks · openapi.json → Webhooks

Open →

Agents

Kitbase MCP server

Hosted Model Context Protocol server (Streamable HTTP) at api.kitbase.dev/mcp. OAuth 2.1 with PKCE for claude.ai and Claude Desktop, or a private API key for headless clients. 180 tools for querying and managing a project.

https://api.kitbase.dev/mcp

Open →

MCP server card & catalog

Machine-readable connection details for the MCP server (application/mcp-server-card+json), advertised in /.well-known/ai-catalog.json on this domain.

api.kitbase.dev/mcp/server-card · kitbase.dev/.well-known/ai-catalog.json

Open → · ai-catalog.json

llms.txt & Markdown pages

An llms.txt index for this site and one for the docs. Every page on kitbase.dev is served as Markdown when you send Accept: text/markdown (or append .md to the URL); docs pages have .md twins too, and llms-full.txt is the whole documentation in one file.

kitbase.dev/llms.txt · docs.kitbase.dev/llms.txt · docs.kitbase.dev/llms-full.txt

Open → · docs llms.txt

Kitbase project assistant

Ask about a project in plain language from the dashboard (or Slack); it reads data through the same tools the MCP server exposes, with the same permission checks.

docs.kitbase.dev/guide/assistant

Open →

Tooling & SDKs

Kitbase CLI (@kitbase/cli)

npm install -g @kitbase/cli. Browser-based login or API-key auth, --json output for scripting, and a command for every public API operation.

npmjs.com/package/@kitbase/cli

Open → · npm

JavaScript / TypeScript SDK

@kitbase/analytics — pageviews, custom events, identify, sessions and feature flags for browsers and Node.js.

npmjs.com/package/@kitbase/analytics

Open → · npm

React & Angular integrations

@kitbase/analytics-react and @kitbase/analytics-angular wrap the core SDK with providers, hooks and services.

docs.kitbase.dev/sdks/react · docs.kitbase.dev/sdks/angular

Open → · Angular

Tracking script

One script tag from kitbase.dev/lite.js, ~3 KB gzipped, no build step, cookie-free.

docs.kitbase.dev/tracking-script

Open →

Self-hosting & open source

Run Kitbase yourself with Docker Compose, or read the SDK source on GitHub. Open-source projects get Kitbase free.

github.com/scr2em/kitbase-sdk

Open → · GitHub

Conventions you can rely on

Base URL. https://api.kitbase.dev; ingestion also answers on https://ingest.kitbase.dev. The public surface is version 1 and path-stable; breaking changes ship under a new prefix.
One error shape. Every non-2xx response is { error: { code, message, details }, timestamp } with a stable, machine-readable code (AUTH_003, PERM_001, …).
Rate limits you can read. RateLimit-Policy, RateLimit and X-RateLimit-* on every response, Retry-After on a 429.
Deprecation you can see coming. An operation marked deprecated: true in the spec sends Deprecation, Sunset and a Link rel="deprecation" header for at least 90 days before removal.
Markdown on request. Send Accept: text/markdown to any page on kitbase.dev, or append .md (docs.kitbase.dev pages have .md twins as well). Unknown URLs return a real 404 — as Markdown, with links to recover from, if that is what you asked for.