Developers

Surface	Use it when
REST API	Your code reads or writes content
MCP server	An AI agent works with your account
MCP tool reference	You need to know exactly what an agent can call
Webhooks	You react to something happening
CLI	You author documentation in a text editor

All of them authenticate with the same API keys and honour the same access rules. Nothing reachable programmatically is wider than what the key's owner can already see.

The common boundary

There are no delete, sharing, billing, account or administrative operations on the agent-facing surfaces. Content visibility can only change through the constrained publish operations. A key cannot be used to grant access to another person.