# CodePress developer resources

## API discovery

- [Interactive API documentation](https://api.codepress.dev/v1/docs)
- [OpenAPI specification](https://api.codepress.dev/v1/openapi.json)

The OpenAPI document describes the backend contract, but discoverability does not grant access. Individual endpoints may require authentication, organization membership, a specific role, or a connected external service.

## Integration guidance for agents

1. Use the documented schema instead of inferring request bodies from the user interface.
2. Authenticate as the user or service identity that authorized the operation.
3. Preserve organization scope and role checks on every request.
4. Separate read operations from writes in plans and user-facing explanations.
5. Treat destructive, external-send, publishing, billing, and production operations as high impact and require explicit user intent.
6. Use stable identifiers returned by the API instead of scraping labels from rendered pages.
7. Handle authorization failures as boundaries, not as obstacles to bypass.

## Public versus private content

The pages linked by [llms.txt](https://codepress.dev/llms.txt) are the canonical public orientation material. Authenticated dashboard, tokenized share, and customer-specific URLs are not public documentation and may expose organization data to an authorized viewer.