Authentication
Create a user-scoped API key for the selected team and send it through the
X-API-Key header.Quickstart
Call
get_current_user, inspect the JSON response, and discover more operations.Agent Start Here
Choose a workflow, load its contract, and handle operation results.
API Operations
Browse the complete method reference.
Endpoints
Every tool operation uses
POST. Replace <tool_name> with the MCP tool name shown in the API Operations reference.
Example:
How It Relates To MCP
The Public API and MCP are two transports over the same FirstTouch operations:- The Public API accepts a JSON request body and returns normal JSON.
- MCP uses the Model Context Protocol and can use browser OAuth or a compatible API key.
- Both enforce the current user, team, permissions, feature access, credit rules, and workflow validation.
- Rotating or revoking an API key immediately affects both Public API and MCP requests using that key.
The Public API does not bypass FirstTouch permissions or product entitlements. An API key can only perform operations its creator is currently allowed to perform in the key’s team.
Request And Response Format
Send a JSON object matching the selected operation’s input schema. Operations without arguments accept an empty object:200 response alone does not establish that downstream work finished. Inspect the result and follow execution and recovery for pending actions and task creation.