Base URL
https://ghostnot.com/apiAuthentication
Session — Supabase auth cookie (browser sessions). Set automatically on login.
API Key — Pass via X-API-Key header. Create keys at /dashboard/api-keys.
None — Public endpoints, no authentication required.
Health
/api/healthService status, version, database connectivity
Bookings
/api/bookings/createCreate a booking with stake hold. Returns Stripe client_secret for payment.
/api/bookings/[id]/cancelCancel a booking. Refund depends on timing (early vs late).
Host Management
/api/host/setupCreate or update host profile (slug, stake, trust threshold).
/api/host/settingsGet current host settings.
/api/host/settingsUpdate host settings (stake amount, calendar, etc.).
/api/host/accountGet host account details.
/api/host/check-slugCheck if a booking slug is available.
Trust (Public)
/api/trust/[slug]Get public trust profile: score, tier, show-up rate, meetings. CORS enabled, 5min cache.
Reputation
/api/reputation/stake-requirementCalculate stake for a host slug. Pass requester_id for trust-adjusted amount.
Wallet
/api/wallet/balanceGet wallet balance, lifetime deposits, lifetime earnings.
/api/wallet/depositInitiate a deposit. Returns Stripe client_secret.
/api/wallet/deposit/confirmConfirm deposit after Stripe payment succeeds.
/api/wallet/withdrawWithdraw from wallet (5% fee). Min $5.
/api/wallet/transactionsPaginated wallet transaction history.
API Keys
/api/keysList your API keys.
/api/keysCreate a new API key with permissions and max stake.
/api/keys/[id]/revokeRevoke an API key.
Disputes
/api/disputes/createRaise a dispute on a meeting (48h window, min 20 char reason).
/api/disputes/[id]/resolveResolve a dispute (for_host or for_requester).
MCP (AI Agents)
/api/mcp/toolsList available MCP tools and their schemas.
/api/mcp/ghostnot/[tool]Invoke an MCP tool. See /docs/mcp for details.
Auth
/api/auth/callbackOAuth callback handler (Supabase Auth).
/api/auth/associate-meetingsLink anonymous bookings to authenticated user.
/api/auth/google-calendarInitiate Google Calendar OAuth.
/api/auth/google-calendar/callbackGoogle Calendar OAuth callback.
Webhooks
/api/stripe/webhookStripe webhook handler for payment events.
Discovery
/.well-known/mcp.jsonMCP server auto-discovery (server card).
/llms.txtAI/LLM discoverability file.