# API and manifest reference

The REST API of the Qaldy control plane and the app manifest, generated from the code that serves and enforces them. For people building tools around Qaldy.

URL: https://docs.qaldy.com/reference/

These pages are reference, not tutorials. They are generated when the site is built, from the same definitions the product runs on, so what is written here is what the API accepts and what the gate enforces.

:::cards
- [API overview](https://docs.qaldy.com/reference/api/)
  Who is calling, how errors look, what is limited, and a first call.
- [All routes](https://docs.qaldy.com/reference/api/routes/)
  Every route of the API in one list, grouped by what it is for.
- [App manifest](https://docs.qaldy.com/reference/manifest/)
  The permission contract of an app version, with an example and every field.
- [openapi.json](https://docs.qaldy.com/openapi.json)
  The API as an OpenAPI 3 document, for your own client or tools.
:::

## Other references

- [MCP tools](https://docs.qaldy.com/mcp/tools/): every tool the MCP server offers, with its inputs.
- [CLI commands](https://docs.qaldy.com/cli/commands/): every `qaldy` command, with its options.
- [Connector catalog](https://docs.qaldy.com/connectors/): every service Qaldy can talk to, with its status.
- [Security proofs](https://docs.qaldy.com/security/proofs/): the automated checks of the security model.