Skip to content
Developer portal

API, MCP, and webhooks

Register apps, mint scoped credentials, inspect delivery history, and read recorded usage against your plan cap. Sandbox and production stay separate. Secrets are shown once.

Open MCPHow OAuth startsOpen workspace

Environments

Sandbox

App registration, test credentials, and non-production webhooks.

Production

Live credentials, live webhooks, and customer traffic.

API reference

Base URL: https://kumebuy-chatty-api-765490759197.us-central1.run.app. Send a Firebase ID token in Authorization.

Apps and credentials

  • POST/api/admin/bots/{bot_id}/devops/appsRegister a sandbox or production app
  • POST/api/admin/bots/{bot_id}/devops/apps/{app_id}/credentialsMint a scoped secret (shown once)
  • POST/api/admin/bots/{bot_id}/devops/apps/{app_id}/oauth-clientRegister a public PKCE OAuth client for this app
  • POST/api/admin/bots/{bot_id}/devops/credentials/{credential_id}/revokeRevoke access

Usage and quotas

  • GET/api/admin/bots/{bot_id}/devops/usageRecorded meter rows
  • GET/api/admin/bots/{bot_id}/devops/quotasPlan cap vs recorded credits this month

Webhooks and OAuth

  • POST/api/admin/bots/{bot_id}/devops/webhook-subscriptionsSubscribe to delivery events
  • GET/api/admin/bots/{bot_id}/devops/webhooksRecorded delivery history
  • GET/mcpMCP OAuth entry
  • GET/oauth/authorizeStart authorization (PKCE S256 required)
  • GET/oauth/consentApprove the client that started /oauth/authorize
  • GET/oauth/connectedOperator redirect after Allow or Deny

SDK and examples

HTTP API Any

curl -X POST "$API/api/admin/bots/$BOT/devops/apps" \
  -H "Authorization: Bearer $FIREBASE_ID_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"My integration","environment":"sandbox"}'

Python Python

import httpx

r = httpx.post(
    f"{api}/api/admin/bots/{bot}/devops/apps",
    headers={"Authorization": f"Bearer {token}"},
    json={"name": "My integration", "environment": "sandbox"},
)
print(r.json())

MCP ChatGPT, Claude, Cursor

Connect at https://inplicom.com/mcp. The client opens GET /oauth/authorize (PKCE S256); you Approve at /oauth/consent.

Web widget JavaScript

<script src="https://inplicom.com/widget.js" data-id="YOUR_ASSISTANT_ID" defer></script>
<script>
window.addEventListener("inplicom:ready", () => {
  window.INPLICOM.open();
});
</script>