Lane A · via API call
Board over HTTPS
GET/POST/PUT https://…/api.php with Content-Type: application/json. Writes need auth (Bearer idToken and/or session). UI boards may also fetch the same endpoint.
AI Assistant // Alien Dark
Your subscription skill is the agent seat. We do not ship a mystery bot: named skills (orchestrator, heavy-dev, design, consulting) become board seats with need-to-know R/W. Every path is labeled: via script, via API call, fetch, GET / PUT / POST, and auth. Web or local · online or offline · public or private · hybrid · export options. Prices may vary.
| Offer | How | Where |
|---|---|---|
| Subscription Skills | Skill pack = agent seat · exact-go · claim · smoke | Web · local · hybrid |
| Tasks | via API call GET/POST/PUT · or fetch demo JSON · auth on writes | Online board · offline kit · hybrid |
| Dashboard proposals | Agent drafts DIP/PR · human go · implement via script/harness | Private Operator · public kit docs |
| Export | ZIP kit · task JSON · reports · compact agent packet | Public demo · private · hybrid |
| Pricing | Templates CA$49 each · skills & retainers separate | Prices may vary |
| Mechanism | When | What to show operators |
|---|---|---|
via script |
Deploy, smoke, capture previews, batch task seed | Script name + host (e.g. deploy-*.py SFTP put allowlist) |
via API call |
Live board SoT, claim, status stamps | Endpoint (e.g. api.php) + method + auth header |
fetch / XHR |
Dashboard / reports UI in the browser | fetch('api.php') or fetch('data/sample-tasks.json') · same-origin |
GET |
Read tasks, meters, public demo JSON | Read-only; demo api.php GET is open |
PUT / POST |
Create/update tasks, full board replace (gated) | Auth required · demo writes off unless MCT_ALLOW_DEMO_WRITES=1 |
Auth |
Any write · Operator dashboard · agent claim | Authorization: Bearer <idToken> and/or PHP session cookie · never commit service-account JSON |
GET/POST/PUT https://…/api.php with Content-Type: application/json. Writes need auth (Bearer idToken and/or session). UI boards may also fetch the same endpoint.
Agent runs via script (smoke, deploy) and tools that wrap API calls. Grok Build / Claude / Codex — still document every GET/PUT and auth surface used.
No public write: edit files in the kit folder. Demo load is fetch('data/sample-tasks.json') (GET static). Deploy later via script or API when authorized.
Session or Bearer token. Name the auth mode in the handoff. No service-account in the kit zip.
GET api.php or fetch(…/sample-tasks.json). Light snapshot only.
Task draft or DIP via harness files. POST/PUT only with auth + go.
Human go → implement · optional SFTP script or HTTPS put · smoke GET URLs.