Which surface
What they share
All of these resolve to one identity in one account, and every action is checked against that identity’s permissions — including each MCP tool, which is authorized against the same capability as its HTTP equivalent. There is no surface that bypasses the permission model. Governed mutations and selected sensitive reads are audited, and a run’s evidence records its instrumented execution — ordinary reads are not audit entries.Next steps
APIs
Base URL, authentication, errors, and the interactive reference.
MCP server
The platform’s own tools, and how to scope a connection.
Connect coding agents
Claude Code, Codex CLI, and Cursor against your account.