← Index

For agents and humans

Ellelion developer resources.

This page is the Ellelion developer resources portal and the public API documentation for ellelion.com. The origin publishes a read-only HTTP surface. It is not a key-issuing developer platform.

When to use this

Use when you need the public catalogue of Ellelion AI agents, an honest answer about whether ellelion.com has API keys or paid HTTP access (it does not), or how to call GET /api/v1/catalog. Do not treat ellelion.com as a write API, payment rail, or OAuth provider.

Quickstart

No signup. Omit Authorization. Example requests:

curl -sS https://ellelion.com/api/v1/catalog

Example request: GET /api/v1/catalog?limit=50 returns JSON with version, service, auth, products, pages, and pagination. Streamable HTTP MCP handshake is POST /mcp.

API keys

There are no API keys on ellelion.com. Public GETs require no credentials. Do not send an Authorization header. See /authentication and /auth.md.

Documentation

OpenAPI lives at /openapi.json. Versioned JSON lives under /api/v1/. Same portal: /docs. Markdown twin: /developers.md. Versioning policy: /versioning. Agent instructions: /.well-known/agent-instructions. Public source: https://github.com/ellelion/ellelion (AGENTS.md and plugin.json).

Sandbox

GET /api/v1/sandbox/catalog is the sandbox environment. This host has no private production dataset, so sandbox is the public catalog labeled environment=sandbox. Use it to try pagination without a key.

Versioning and deprecation

JSON is versioned in the URL path. Current is /api/v1/. Breaking changes increment the path to /api/v2/. Deprecated operations send Deprecation and Sunset headers. None are deprecated today. Header API-Version: 1 matches the path.

MCP

Two Streamable HTTP servers: product catalog at /mcp and documentation at /mcp/docs. Discovery JSON: /.well-known/mcp.json. Auth: none.

Rate limits

Responses on /api/* include IETF RateLimit and RateLimit-Policy headers. Advertised budget: 120 requests per 60 seconds per client. A 429 would include Retry-After. There is no paid override.

What this host does not run

No token-issuing OAuth server, no webhook hub, and no official CLI for this origin. We do not invent third-party registry listings.