API

Bobcorn auth docs

Bobcorn public website metadata endpoints require no authentication. There are no API keys, OAuth scopes, user accounts, session cookies, or token refresh flows for these endpoints.

No sign-in required — every endpoint below is public and read-only.

Current access rules

/release.json, /changelog.json, /openapi.json, and agent discovery files are public and read-only.
Local Bobcorn project files stay on the user's machine. Agents need local filesystem permission to inspect or modify .icp files.
Bobcorn does not currently provide hosted workspaces, account APIs, OAuth, or SSO.

Machine-readable version: /api/auth.json.