Developers

API Documentation

The Super Lambda API is a small JSON API for account signup/login, the current-user endpoint, contact submissions and a health check. Base URL: https://superlambda.com.

Discovery resources

OpenAPI 3.1 spec: /openapi.json
API catalog (RFC 9727): /.well-known/api-catalog
Agent auth guide: /auth.md
Agent skills: /.well-known/agent-skills/index.json
MCP server card: /.well-known/mcp/server-card.json (endpoint /mcp)
Markdown for agents: send Accept: text/markdown to any content page.

Authentication

Cookie sessions. /api/signup and /api/login set an HttpOnly; Secure; SameSite=Lax cookie named sl_session (7-day expiry). Send it with authenticated requests. This API does not use OAuth.

Endpoints

GET/api/health

Liveness/health probe. Returns { "ok": true, "status": "ok", "service": "super-lambda", "time": "…" }.

POST/api/signup

Create an account and start a session.

{ "name": "Ada Lovelace", "email": "ada@example.com", "password": "at-least-8-chars" }

201 → { "ok": true, "user": { "id", "name", "email" } }. 409 if the email exists.

POST/api/login

Authenticate and start a session.

{ "email": "ada@example.com", "password": "at-least-8-chars" }

200 on success, 401 on invalid credentials.

GET/api/me

Return the authenticated user (requires the sl_session cookie). 401 if not signed in.

POST/api/logout

Destroy the current session and clear the cookie.

POST/api/contact

Submit a contact message.

{ "name": "Ada", "email": "ada@example.com", "message": "10+ characters…" }

Rate limits

Per client IP: login 20/15min, signup 10/hour, contact 5/hour. Over-limit requests return 429 with a Retry-After header.