API and agents
One set of actions — abilities — behind the admin, the REST API, the command line, MCP and the built-in assistant.
1 min readView as Markdown
On this page
Lettern was designed so that software can work with a site as well as people can. Every action is an ability, and every way into Lettern calls abilities:
| Way in | Who it is for | Authentication |
|---|---|---|
| The admin | People | Session, CSRF-protected |
| REST API | Integrations, scripts, front ends | Personal access tokens |
| MCP | Claude, ChatGPT, Cursor and other agents | OAuth 2.1 or tokens |
| Assistant | People, inside the admin | Their session |
| CLI | Developers, deploy scripts | Shell access |
Whichever way an action comes in, it is validated against the same schema, checked against the same permissions, and written to the same audit log.