{"service":"config-api","description":"Central configuration service. This is a JSON API with no web interface — the admin dashboard is a separate service.","authentication":"Send X-App-Id and X-App-Key headers. Credentials in the query string are rejected with 400.","endpoints":{"GET /apidoc":"how to connect: a page in a browser, JSON to a tool, no auth","GET /apidoc.json":"the same document, always JSON — use this one from code","GET /client.js":"the client loader; vendor it into your app, do not fetch at runtime","GET /healthz":"liveness, no auth","GET /v1/config":"resolved config for the calling app; supports If-None-Match","GET /v1/env":"the same config as a dotenv file — the zero-code-change integration","GET /v1/client-config":"browser-safe subset (feature flags only)","GET /enroll.mjs":"run this to ask for credentials; no credential needed","GET /connect-config.skill.md":"instructions for the coding agent connecting an app","POST /v1/enroll":"ask an admin for a key for your app; no credential needed","GET /v1/enroll/{id}":"has that request been decided yet?","POST /v1/enroll/{id}/claim":"collect the key once approved","GET /admin/*":"administrative surface; closed unless ADMIN_API_TOKEN is set"},"start_here":"/apidoc","example":"curl -H 'X-App-Id: your-app' -H 'X-App-Key: pk_live_...' <this-origin>/v1/config"}