Understand
API, SDK and MCP
REST is the versioned wire contract, the SDKs make it comfortable in code, and MCP lets an entitled AI client use a curated subset as tools. All three meet the same identity, authority and budget rules.
48 operations across 41 paths are frozen for generation. The reference is public; runtime access needs an invitation, and operator, debug, provider, credential and internal orchestration routes are not part of it.
TypeScript
@lumiwright/agent-factory 1.0.0-beta.1 · ESM · Node 18+ · 37 methods.
import { AgentFactoryClient } from "@lumiwright/agent-factory";
const client = new AgentFactoryClient({
baseUrl: "https://your-invited-runtime.example"
});
const catalog = await client.catalogRead();
Built and verified locally. Not yet claimed as published on npm.
Python
lumiwright-agent-factory 1.0.0b1 · Python 3.11+ · no runtime dependencies · 37 methods.
from lumiwright_agent_factory import AgentFactoryClient
client = AgentFactoryClient(
"https://your-invited-runtime.example",
bearer_token="opaque invitation-bound token",
)
catalog = client.catalog_read()
Built and verified locally. Not yet claimed as published on PyPI.
Operations
| Family | Operations |
|---|---|
| Catalog | catalog.read |
| Automations | automations.create, automations.list, automations.approve, automations.control |
| Plans | plans.create, plans.list, plans.mark-used, plans.delete |
| Projects | projects.create, list, read, readiness.read, items.read, files.list, files.read, objects.read, upload, export, accept, delete |
| Stages | stages.preflight, run, run-free, edit, approve, receipt.read |
| Publishing | publish.options.read, preflight, approve, run, receipt.read, history.read |
| Repurposing | repurpose.clips.create, repurpose.clips.read |
| Evidence | runs.read, spending.read |
Runtime rules
- Idempotent mutations. Every mutation takes a caller-supplied idempotency key; the SDKs expose
Retry-Afterand never retry on their own. - Verified downloads. Content length and the RFC 9530 SHA-256 digest are checked before success.
- Tenancy from the credential. Your credential binds the customer and workspace; a requested identifier cannot substitute it.
- Curated MCP. MCP exposes an explicit subset through the same governed handlers.