# LegoTechApps Developer Portal

Build agents, automations, and integrations against LegoTechApps business systems.

## Quickstart

1. Read the [OpenAPI 3.1 contract](https://legotechapps.com/openapi.json).
2. Discover the stable REST surface with GET https://legotechapps.com/api/v1/.
3. Read the [version policy](https://legotechapps.com/api/v1/policy).
4. Sign in to the LegoTechApps dashboard and create a scoped API key.
5. Test public MCP discovery at https://legotechapps.com/mcp without credentials.
6. For permitted business data, connect to https://legotechapps.com/lt/api/mcp using an Authorization: Bearer header.

The public discovery resources require no authentication. Product data and tools require an API key created by an authorized account user. Keys inherit the user's business and module permissions, are read-only unless write access is explicitly granted, and can be revoked from the dashboard.

## MCP

The public LegoTechApps MCP server at https://legotechapps.com/mcp uses Streamable HTTP and JSON-RPC 2.0. Its official Registry-compatible metadata is [server.json](https://legotechapps.com/server.json). It exposes only read-only developer discovery tools. The authenticated business MCP at https://legotechapps.com/lt/api/mcp can expose permitted tools for clients, orders, invoices, stock, suppliers, expenses, buildings, residents, units, vehicles, missions, reviews, QR codes, forms, media, chatbot knowledge, and account spending when those modules are enabled.

## REST lifecycle

Major REST versions are encoded in the path, beginning with /api/v1/. Backward-compatible additions can be made within v1. A breaking contract requires a new major path. Deprecated resources use the RFC 9745 Deprecation response header and migration documentation. A scheduled removal also uses the Sunset header and is announced at least six months in advance.

## Errors and limits

REST errors use RFC 9457 application/problem+json with type, title, status, detail, instance, code, and hint. Public responses publish RateLimit-Policy and RateLimit; a 429 response also includes Retry-After. Agents should stop or slow requests when remaining quota is low.

## Sandbox and command line

The unauthenticated v1 discovery endpoint is safe for connection tests. New accounts include trial access for product evaluation; product data remains isolated by account. There is no published official npm, PyPI, or Homebrew CLI yet. For automation, use curl, an OpenAPI client, or a compatible MCP host such as Claude, ChatGPT, Cursor, or VS Code.

## Support

Use the [contact page](https://legotechapps.com/contact/) for integration access, API keys, scopes, sandbox questions, or a production architecture review.