Cofounder Agent-First API

REST declared

Details

URL: https://api.superoptimizers.cofounder.co/cofounder-cli/v1
Spec: https://api.superoptimizers.cofounder.co/openapi.json
Docs: https://docs.cofounder.co/cli

Authentication

Cofounder company API key api_key declared

Authorization: Bearer <credential>

With an admin CLI session, run cofounder company api-keys create --name <name> (POST /cofounder-cli/v1/company/api-keys). The cfk_… secret prints once. Send it as Authorization: Bearer <key> to the REST API, or export it as COFOUNDER_API_TOKEN for the CLI. Keys authenticate as the company that minted them and can be revoked with cofounder company api-keys revoke. Accepted by the REST API and CLI — the hosted MCP endpoint takes OAuth or session tokens instead.

Cofounder session token bearer declared

Authorization: Bearer <credential>

After cofounder auth login, run cofounder auth token (or cofounder auth token --json) to print a Supabase access token for the signed-in user. Send it as Authorization: Bearer <token> to the REST API or the MCP endpoint, or export it as COFOUNDER_API_TOKEN for the CLI. It expires with the session — mint a company API key for durable automation.