mdplane API via curl

Use this skill when the agent should call mdplane via HTTP directly (curl, CI jobs, scripts, SDK-free integrations).

Operating Rules

1. OpenAPI and server behavior are the source of truth.
2. Do not invent routes, request fields, query params, or response shapes.
3. Respect auth boundaries:
   • Capability routes: /r/{key}, /a/{key}, /w/{key}
   • API key routes: /api/v1/*
   • Control/session routes: /workspaces/*, /api/auth/* (only when explicitly needed)
4. Prefer least privilege and avoid write scope unless required.
5. Never print capability URLs, API keys, or cookies in logs/output.

Standard Workflow