---
title: "Tamloot Developer Resources"
description: "Everything you need to build on Tamloot: a read-only public REST API, an OAuth-secured MCP server, and one auth walkthrough that covers both."
canonical: "https://tamloot.cc/en/developers"
---

# Tamloot Developer Resources

> Everything you need to build on Tamloot: a read-only public REST API, an OAuth-secured MCP server, and one auth walkthrough that covers both.

- Public API base URL: `https://api.tamloot.cc/v1`
- MCP endpoint: `https://mcp.tamloot.cc/mcp`

## Tamloot Public API

A read-only REST API over the contacts, sessions, transcripts, and notes in a Tamloot account. Authenticate with a bearer API key minted under Settings → API.

- [Tamloot Public API documentation](https://tamloot.cc/en/docs/api)
- [https://api.tamloot.cc/v1](https://api.tamloot.cc/v1)

## Tamloot MCP Server

An OAuth-secured Model Context Protocol server over Streamable HTTP, so Claude, ChatGPT, Cursor, and other MCP clients can read a signed-in user’s own Tamloot data.

- [Tamloot MCP server setup guide](https://tamloot.cc/en/docs/mcp-server)
- [https://mcp.tamloot.cc/mcp](https://mcp.tamloot.cc/mcp)

## Tamloot Agent Authentication

How an agent discovers, registers for, and uses a credential on either surface — written as a prose walkthrough at /auth.md.

- [Tamloot agent auth guide (/auth.md)](https://tamloot.cc/auth.md)
- [OAuth protected resource metadata](https://mcp.tamloot.cc/.well-known/oauth-protected-resource)

## Machine-readable descriptions

Fetch the API surface without scraping a page: an OpenAPI 3.1 description, an RFC 9727 API catalog, and llms.txt as the site index for agents.

- [Tamloot OpenAPI 3.1 description (/openapi.json)](https://tamloot.cc/openapi.json)
- [Tamloot API catalog (/.well-known/api-catalog)](https://tamloot.cc/.well-known/api-catalog)
- [llms.txt](https://tamloot.cc/llms.txt)
- [Sitemap](https://tamloot.cc/sitemaps/sitemap.xml)

## Rate limits

Every Tamloot Public API response declares the throttling policy, so a client can pace itself rather than discover the ceiling by hitting it. There is no RateLimit-Remaining: the throttle is enforced at the edge, ahead of the application, so no single server can see a caller’s running total.

| Header | Meaning | Sent on |
| --- | --- | --- |
| `RateLimit-Limit` | Requests allowed per one-second window | Every response |
| `RateLimit-Policy` | The policy, as <limit>;w=<window seconds> | Every response |
| `Retry-After` | Seconds to wait before retrying | 429 only |

Every page linked here also answers in markdown. Send Accept: text/markdown, or append the path to /md — for example /md/en/developers.

## Where to look next

- [Home](https://tamloot.cc/en)
- [Pricing](https://tamloot.cc/en/pricing) — also as markdown at [/pricing.md](https://tamloot.cc/pricing.md)
- [Documentation](https://tamloot.cc/en/docs)
- [Developer resources](https://tamloot.cc/en/developers)
- [Public API documentation](https://tamloot.cc/en/docs/api)
- [MCP server setup](https://tamloot.cc/en/docs/mcp-server)
- [Agent auth guide](https://tamloot.cc/auth.md)
- [llms.txt](https://tamloot.cc/llms.txt)
- [OpenAPI description](https://tamloot.cc/openapi.json)
- [API catalog](https://tamloot.cc/.well-known/api-catalog)
- [Sitemap](https://tamloot.cc/sitemaps/sitemap.xml)