================================================================================
OVERSKILL API - CONCISE DOCUMENTATION
Version: 1.1 | Updated: 2026-05-06
================================================================================

BASE URL: https://overskill.com/api/v1

AUTHENTICATION
--------------
Most endpoints require: X-API-Key: os_your_key_here
Get API key at: https://overskill.com/account (Team Settings > API Keys)

NO AUTH endpoints (build first, sign up later):
- POST /api/v1/anonymous_builds  — Bolt-style build → claim flow
- POST /api/v1/auth/magic_code    — passwordless login
- POST /api/v1/accounts           — public signup

DISCOVERY
---------
- /SKILL.md                                    — full agent skill (this file's longer cousin)
- /llms-full.txt                               — exhaustive API reference
- /.well-known/mcp.json                        — MCP Server Card
- /.well-known/agent-skills.json               — Agent Skills card
- /.well-known/oauth-authorization-server      — OAuth metadata (RFC 8414)
- /.well-known/oauth-protected-resource        — OAuth resource metadata (RFC 9728)
- /sitemap.xml                                 — full SEO sitemap

QUICK START — authenticated agent
---------------------------------
Generate an app:
POST /api/v1/generation_queue
{
  "prompt": "Build a task management app"
}

Response:
{
  "job": { "id": "j_abc123" },
  "app": { "id": "QjqEkj", "name": "My App" },
  "preview_url": "https://preview-QjqEkj.overskill.app"
}

QUICK START — anonymous agent (no API key needed)
-------------------------------------------------
Build → claim flow for end users who haven't signed up yet:

POST /api/v1/anonymous_builds
{
  "prompt": "Build a coffee shop landing page",
  "email": "user@example.com"   // optional, for friendlier claim flow
}

Response (201):
{
  "success": true,
  "app_id": "QjqEkj",
  "preview_url": "https://preview-QjqEkj.overskill.app",
  "claim_token": "eyJ...",
  "claim_url": "https://overskill.com/claim/eyJ...",
  "expires_at": "2026-05-08T18:00:00Z"
}

Then: hand the user the claim_url. They sign up within 48 hours and the
app is transferred to their account. If they don't, the app is deleted.

Poll status with: GET /api/v1/anonymous_builds/{app_id}
Programmatic claim (for agents that can authenticate):
  POST /api/v1/anonymous_builds/{app_id}/claim
  Headers: X-API-Key (or Authorization: Bearer)
  Body: { "claim_token": "..." }

Rate limits: 1 build/min, 3/hour, 10/day per IP.

MAIN ENDPOINTS
--------------
POST   /generation_queue       - Generate/update apps (auth)
POST   /anonymous_builds       - Build without auth (claim later)
GET    /apps                   - List your apps (auth)
GET    /apps/{id}              - Get app details (auth)
POST   /apps/{id}/deploy       - Deploy to production (auth)
DELETE /apps/{id}              - Delete an app (auth)

For full documentation with all parameters and examples:
https://overskill.com/llms-full.txt

For interactive API reference:
https://overskill.com/developers