Skip to content

API Access

Jump to bottom
Doug Hatcher edited this page Jul 5, 2026 · 2 revisions

API access

orgware lets you reach the Tribal Record from your own tools — and from an AI assistant — with a personal API key. It's the same record you see in the library, returned as data, always within your ring.

The API access page

Keys

Keys look like wcm_live_…. They're stored only as a hash, so the full key is shown once when you create it — copy it immediately into a safe place (a password manager). Lose it and you simply revoke it and make a new one.

A key carries your ring: a member's key sees cleared member/public records; a leader's key sees the whole corpus. Treat it like a password.

  • Members can create, list, and revoke their own keys.
  • Leadership has a dedicated API access page (waccamaw.org/members/api-access) for durable, non-expiring keys and ready-to-paste assistant configuration; an admin can also provision a key for another leader.

Using a key

Send it as a bearer token:

curl https://members.waccamaw.org/api/query \
  -H "Authorization: Bearer wcm_live_your_key_here"

With an AI assistant (MCP)

The record is exposed as a Model Context Protocol server at mcp.waccamaw.org. Point any MCP-capable assistant (Claude, etc.) at it with your key and it can search and cite the tribe's records for you, with the same ring rules and source-backed verification.

  • claude.ai (web): when you create a key, the API access page shows a single connector URL (https://mcp.waccamaw.org/mcp?token=…). Paste it whole into claude.ai → Settings → Connectors → Add custom connector. The URL carries your key, so treat it like the key.
  • Claude Desktop / Codex: use the mcp-remote config the page provides, with your key in an Authorization header.

The assistant gets a small set of tools:

  • whoami — confirm your identity and ring.
  • search_corpus — search the records.
  • list_records — browse by type.
  • get_record — read a single record.
  • get_source — open the primary-source scan behind a record.

For admins — the query console

Admins have a read-only SQL console (/api/query) for ad-hoc questions against the roll — SELECT-only, single-statement, capped, with writes and schema changes blocked. It's a safe way to answer "how many…" questions directly.

Revoking a key

Revoke a key any time — on the API access page (leaders) or via the keys API (members). It stops working immediately; your other keys keep working.

Next: For leadership.

waccamaw.org · orgware

a product of hatcher.ltd

Clone this wiki locally