Babra AI Developer & Agent API

Public API

These endpoints need no authentication and are rate limited to 60 requests per minute per client.

• GET /api/v1/status
• GET /api/v1/capabilities
• GET /api/v1/changelog
• GET /api/v1/catalog/stats
• GET /api/v1/catalog/taxonomy

OpenAPI specification

The full surface is described by an OpenAPI 3.1 document.

https://babra.ai/openapi.json

MCP server

The Model Context Protocol endpoint speaks Streamable HTTP. Public tools need no authentication. Tools that read an applicant's own data require an OAuth access token.

https://babra.ai/mcp

OAuth 2.1

Authorization uses the OAuth 2.1 authorization code flow with PKCE and supports dynamic client registration. All scopes are read-only.

https://babra.ai/.well-known/oauth-authorization-server

Scopes

• profile:read Read the signed-in applicant's profile basics
• programs:read Read the signed-in applicant's program shortlist
• materials:read Read the signed-in applicant's materials checklist status

Rate limits

Unauthenticated requests are limited per client IP: 60 per minute for the public API and the MCP endpoint, 30 per minute for the OAuth authorize, token, and revoke endpoints, and 20 per minute for client registration. Responses carry RateLimit-Limit, RateLimit-Remaining, and RateLimit-Reset headers, and GET /api/v1/capabilities reports the current limit for every endpoint.