Developers

Build on top of Cognia.

REST API, MCP server, and webhooks. Everything you need to wire Cognia into your IDE, your CI, your customer-success workflow, or a tool you haven't thought of yet.

Open API reference Manage API keys

bashcopy

 1"tok-comment"># Install MCP server in Claude Code
 2"tok-cmd">claude mcp add "tok-flag">--scope user "tok-flag">--transport http cognia \
 3  https://api.cogniahq.tech/mcp/v1/jsonrpc \
 4  "tok-flag">--header "Authorization: Bearer ">$COGNIA_API_KEY"
 5
 6"tok-comment"># Or hit the REST API directly
 7"tok-cmd">curl "tok-flag">-s "https://api.cogniahq.tech/v1/search" \
 8  "tok-flag">-H "Authorization: Bearer ">$COGNIA_API_KEY" \
 9  "tok-flag">-d '{"query":"why did we pick Postgres?"}'

REST API

start here

OpenAPI 3.1 reference. Every endpoint accepts a session cookie or an API key bearer token. Memory CRUD, search, action planning and execution, integration management.

bashcopy

 1"tok-cmd">curl "tok-flag">-s "https://api.cogniahq.tech/v1/search" \
 2  "tok-flag">-H "Authorization: Bearer ">$COGNIA_API_KEY" \
 3  "tok-flag">-d '{"query":"what was decided about the migration?"}'

OpenAPI JSON Swagger UI

MCP server

Model Context Protocol JSON-RPC server. Plug Cognia into Claude Code, Cursor, Zed, Continue, and Claude Desktop. Coding agents pull org context as a native tool.

bashcopy

 1"tok-cmd">claude mcp add "tok-flag">--scope user "tok-flag">--transport http cognia \
 2  https://api.cogniahq.tech/mcp/v1/jsonrpc \
 3  "tok-flag">--header "Authorization: Bearer ">$COGNIA_API_KEY"

MCP setup What we got wrong building it

Webhooks

Subscribe to integration sync events, memory create/update, and agent action events. HMAC-SHA256 signature verification on every delivery.

tscopy

 1"tok-comment">// Verify signature on every delivery
 2"tok-keyword">const sig = req.headers['x-cognia-signature']
 3"tok-keyword">const expected = hmac(secret, req.rawBody)
 4"tok-keyword">if (sig !== expected) "tok-keyword">reject(401)

Webhook docs

API keys

Create scoped, per-org API keys from the Admin UI. Scopes for memories.read, memories.write, actions.plan, actions.execute. Keys are hashed at rest and revealed once.

Manage keys

Quick questions

Where do I get an API key?

Sign in, open Admin → API keys & MCP, and click Create key. Pick the scopes you need; the key is shown once and stored hashed at rest.

Are there rate limits?

Yes. 100 requests per minute per API key on free, higher on paid tiers. Burst limits up to 5x for short windows. The exact numbers are in the OpenAPI reference; we return x-ratelimit-* headers on every response.

Can I self-host?

Yes, on Enterprise. We ship Terraform modules for AWS, GCP, and Azure; the API container, the worker pool, Postgres, Redis, and Qdrant configurations are all public so you can audit them. Talk to us via the pricing page for the Enterprise tier.

How do I report a security issue?

Email cogniahq@gmail.com with details. Or see our security page for the full disclosure process. We respond within one business day.

Get started

Spin up an API key, drop in the MCP server, and have your coding agent answering org questions in under five minutes.

Create a key

REST API

MCP server

Webhooks

API keys

Quick questions

Related reading