Read-only access to your company’s OKRs.

What a key is

Keys are org-scoped and start with fok_. They authenticate as the organization, not as a person. Org comes from the key — you do not need to send X-Org-Id (if you do, it must match).

Any org admin can mint a key. Every member can see that keys exist. There is no partner program and no plan to unlock this. Rate limits are ops guardrails, not billing.

How to authenticate

Send the secret as a bearer token. Copy the REST base URL from Settings → Integrations (Connection). Browser JavaScript from other websites will not work — the app origin is allowlisted. Use curl, a server, or a local agent client.

Authorization: Bearer $GAHMBIT_API_KEY

# REST base — copy from Settings → Integrations

REST (live)

GET and HEAD only. The same org-visible resources a member can read: people, coverage (including Missing), cycles, objectives, key results, check-ins, comments, and the Company activity feed.

curl -sS \
  -H "Authorization: Bearer $GAHMBIT_API_KEY" \
  "$GAHMBIT_REST_BASE/objectives"

MCP (when Settings shows an endpoint)

If Settings → Integrations lists an MCP endpoint, pass the same bearer key. Tools wrap the GETs below. list_events is the Company feed only — there is no My Feed for keys. If the MCP field is empty, use REST. MCP is not a default public production route.

{
  "mcpServers": {
    "gahmbit": {
      "url": "<MCP endpoint from Settings>",
      "headers": {
        "Authorization": "Bearer $GAHMBIT_API_KEY"
      }
    }
  }
}

What a key cannot do

Writes return 403 KEY_READ_ONLY. Keys cannot create or edit OKRs, post check-ins, or comment.

They cannot call the AI service — no agents, no coaching, no wallet debit. They cannot act as you (GET /people/me, My Feed). They cannot manage the org, billing, or Slack from a key. One key is one org.

Preview, not a platform SKU

This is a documented preview of the free-core read path — not a versioned public API and not a homepage product. Paths and MCP tool names may change. We do not publish the full internal OpenAPI.

Create and revoke keys under Settings → Integrations. Admins mint; members can see the inventory.

Documented MCP tools

Each tool is a GET on the OKR API. Coverage gaps are never dropped. Company feed only — no preference filter.