Lummo public API

When to use this surface

Use these public APIs to subscribe newsletter emails, talk to the marketing-site Lummito assistant, mint a free public key, or dry-run in the sandbox. They do not expose obra budgets, purchasing, or certificates — those require a tenant on https://app.lummo.ar.

Agent onboarding (zero sales forms)

• Zero-auth: call /api/v1/* without credentials.
• Self-serve free key: POST /api/v1/keys or POST /agent/auth {"type":"anonymous"}.
• Sandbox: POST /api/v1/sandbox/echo.
• Product access: contact us on WhatsApp.

Versioning & deprecation

Canonical version is URL-path /api/v1/. Legacy aliases under /api/ remain. Breaking changes use /api/v2/ or a documented Lummo-API-Version header. Deprecations announce Deprecation + Sunset (≥ 90 days). Details: Lummo API versioning.

Specs & discovery

• OpenAPI JSON: /openapi.json
• OpenAPI YAML: /api/openapi.yaml
• Lummo API hub: /lummo-api
• Lummo developers hub: /lummo-developers
• Lummo CLI: /lummo-cli
• Lummo webhooks: /lummo-webhooks
• Lummo onboarding: /onboarding
• API catalog (RFC 9727): /.well-known/api-catalog
• Agent index: /llms.txt
• MCP manifest: /.well-known/mcp.json
• MCP server card: /.well-known/mcp/server-card.json
• Streamable HTTP MCP: /mcp
• auth.md: /auth.md
• Product docs: /docs

Errors

All /api/* errors — including unknown paths — return application/problem+json (RFC 9457) with code, detail, and resolution. Agents should never need to parse HTML error pages for the public API.

POST /api/v1/newsletter

Subscribe an email to the product newsletter. No API key. Body: { "email": "[email protected]" }. Rate limit: 8 requests / 15 minutes per IP+email — see RateLimit headers; honor Retry-After on 429. Legacy alias: /api/newsletter.

POST /api/v1/lummito/chat

Quota-limited chat for the marketing assistant. Prefer the on-site widget for humans. Quota is tracked with an HTTP-only cookie. Errors use problem+json. Responses include RateLimit headers.

Authentication

Public landing endpoints do not require OAuth or API keys. Optional free keys via POST /api/v1/keys. ERP APIs on https://app.lummo.ar require a signed-in tenant session — contact [email protected] for partner integrations on the ERP.

Sandbox

Use POST /api/v1/sandbox/echo for agent dry-runs. Newsletter and Lummito landing calls do not mutate obra data. Product access: contact us.

Markdown for agents

Send Accept: text/markdown to https://lummo.ar/ (or fetch /index.md) for a markdown twin of key pages. Responses include Vary: Accept.