# Acadevor API and MCP documentation

Acadevor publishes a versioned public API, a synthetic read-only sandbox, discovery metadata, an official CLI, a public read-only MCP server, and a separately protected Business MCP server.

## Public discovery

- API catalog: https://acadevor.com/.well-known/api-catalog
- Private developer portal (subscriber access): https://acadevor.com/developers
- API v1: https://acadevor.com/api/v1
- OpenAPI description: https://acadevor.com/openapi.json
- Synthetic sandbox: https://acadevor.com/api/v1/sandbox
- Agent health: https://acadevor.com/.well-known/agent-health
- Agent skills: https://acadevor.com/.well-known/agent-skills/index.json
- MCP server card: https://acadevor.com/.well-known/mcp/server-card.json

## Official BI Superpowers CLI

- npm package: https://www.npmjs.com/package/bi-superpowers
- command: npx bi-superpowers --help

BI Superpowers uses a browser OAuth handoff through Supabase Auth with Google or Microsoft. After active product access is confirmed, Acadevor issues a CLI bearer token.

## Versioning and errors

The public API uses URL versioning under /api/v1. Compatible fields may be added inside v1. Breaking changes use a new URL version. Deprecations use Deprecation, Sunset, and Link headers with at least 90 days of notice.

- Machine-readable lifecycle and deprecation policy: https://acadevor.com/api/deprecation-policy

Errors use RFC 9457 application/problem+json with type, title, status, detail, code, resolution, and instance. API responses publish RateLimit headers. A 429 response also includes Retry-After.

## Public MCP access

Acadevor MCP is a public, read-only Streamable HTTP server for the same synthetic sandbox used by the API. It exposes one tool, never reads customer data, and never performs writes.

Endpoint: https://integrations.acadevor.com/mcp/public

Transport: Streamable HTTP

Authentication: none

## Protected Business MCP access

Acadevor Business MCP is available at https://integrations.acadevor.com/mcp. It requires an Acadevor-issued bearer token and keeps bounded business tools behind approval controls.