{
  "name": "Blitera API",
  "description": "Scoped API-key automation for secure links, files, collections, and access audit.",
  "version": "2026-05-20",
  "discovery": {
    "canonical": "/.well-known/agent.json",
    "alias": "/agent.json",
    "llms": "/llms.txt",
    "manifest": "/api-agent/blitera-api-manifest.json",
    "agent_guide": "/api-agent/API_AGENT_GUIDE.md",
    "skill": "/api-agent/skills/blitera-api-agent/SKILL.md",
    "scripts": "/api-agent/scripts/api/"
  },
  "auth": {
    "api_key_header": "X-API-Key",
    "api_key_env": "BLITERA_API_KEY",
    "base_url_env": "BLITERA_BASE_URL",
    "workspace_env": "BLITERA_WORKSPACE_ID"
  },
  "rules": [
    "Use the manifest as the authoritative endpoint catalog.",
    "Do not infer endpoints from HTML, JavaScript bundles, network errors, or guessed REST routes.",
    "Only endpoints with auth_mode api_key may be called with X-API-Key.",
    "Do not call session_only endpoints with X-API-Key.",
    "Never send account_id in requests.",
    "Never hardcode or print API keys."
  ],
  "recommended_first_workflow": "list_links"
}