API Reference

Exhaustive HTTP for the web app and non-MCP SDK callers. Bots should use MCP + OAuth at mcp.wrok.app/mcp — not API keys. Agents without MCP use Host mcp.wrok.app.

Base URL: https://mcp.wrok.app · Auth: prefer OAuth Bearer. wrok_sk_ is a legacy/proof fallback for these callers only. Implementation alias (do not prefer): https://wrok-agent.fly.dev — deprecate-soon side door, not the bot install Host.

Authentication

POST/api/v1/auth/signupCreate a new account
POST/api/v1/auth/loginLog in and get an API key
GET/api/v1/auth/meGet current authenticated user
POST/api/v1/auth/api-keysCreate a new API key
GET/api/v1/auth/api-keysList all API keys
DELETE/api/v1/auth/api-keys/{id}Revoke an API key
POST/api/v1/auth/personal-api-tokensCreate a Muse-class personal API token (shown once)
GET/api/v1/auth/personal-api-tokensList personal API tokens (prefix only)
DELETE/api/v1/auth/personal-api-tokens/{id}Revoke a personal API token

Profile

GET/api/v1/profileGet your profile
PUT/api/v1/profileUpdate your profile
GET/api/v1/career-dataGet all career data (profile + roles + skills + projects + education)

Roles

GET/api/v1/rolesList all roles
POST/api/v1/rolesAdd a new role
PATCH/api/v1/roles/{id}Update a role
DELETE/api/v1/roles/{id}Delete a role

Skills

GET/api/v1/skillsList skills (filter by ?category=)
POST/api/v1/skillsAdd or update a skill (upsert)
DELETE/api/v1/skills/{id}Delete a skill

Education

GET/api/v1/educationList education entries
POST/api/v1/educationAdd education
PATCH/api/v1/education/{id}Update education
DELETE/api/v1/education/{id}Delete education

Projects

GET/api/v1/projectsList projects
POST/api/v1/projectsAdd a project
PATCH/api/v1/projects/{id}Update a project
DELETE/api/v1/projects/{id}Delete a project

Blog

GET/api/v1/blog-preferencesGet writing preferences
PUT/api/v1/blog-preferencesUpdate writing preferences
GET/api/v1/blog-postsList all blog posts
POST/api/v1/blog-postsCreate a blog post
GET/api/v1/blog-posts/{id}Get a blog post
PUT/api/v1/blog-posts/{id}Update a blog post
DELETE/api/v1/blog-posts/{id}Delete a blog post
POST/api/v1/blog-posts/{id}/publishPublish a post
POST/api/v1/blog-posts/{id}/unpublishUnpublish a post

Job Applications

GET/api/v1/job-applications/inboxList actionable inbox items (typed next_action)
POST/api/v1/job-applications/{id}/advanceExecute typed next_action (enum only)
POST/api/v1/job-applications/{id}/tailored-resumeAgency generate_tailored_resume: YAML+PDF via internal wrok-docx; status tailored-resume-generated
GET/api/v1/job-applicationsList applications (filter by ?status=)
POST/api/v1/job-applicationsCreate an application
GET/api/v1/job-applications/{id}Get an application
PATCH/api/v1/job-applications/{id}Update status (implies next_action), resume_id (YAML+PDF SoR), or advance
DELETE/api/v1/job-applications/{id}Delete an application
📋Job-pipeline inbox (bot)→

MCP Agency tools on /mcp (list_inbox, create_application, advance_application, get_resume, generate_tailored_resume). HTTP is the same ledger for web/SDK.

Profile Page

GET/api/v1/profile-pageGet your profile page
POST/api/v1/profile-pageCreate a profile page
PUT/api/v1/profile-pageUpdate profile page
DELETE/api/v1/profile-pageDelete profile page
POST/api/v1/profile-page/publishPublish profile page
POST/api/v1/profile-page/unpublishUnpublish profile page
POST/api/v1/profile-page/generateAuto-generate from career data
GET/api/v1/profile-page/check-slug/{slug}Check slug availability (no auth)

Resume

POST/api/v1/resumesStore YAML+optional PDF (same Agency Bearer as GET)
POST/api/v1/resumes/regenerateRegenerate resume from career data
GET/api/v1/resumesList stored resume versions (Agency Bearer)
GET/api/v1/resumes/latestGet latest resume (?format=json|yaml|markdown|pdf)
DELETE/api/v1/resumesDelete all resumes

Chat

POST/chatSend message to AI agent (multipart)
POST/chat/streamStream AI response (SSE, multipart)
GET/api/v1/conversations/currentGet conversation history
DELETE/api/v1/conversations/currentClear conversation

Coding Profile

GET/api/v1/coding-profileGet coding profile
GET/api/v1/coding-machinesList development machines

Account

DELETE/api/v1/user/resetWipe product data; keeps account and API keys

Public (no auth)

GET/api/v1/public/profiles/{slug}View published profile
GET/api/v1/public/profiles/{slug}/blogView published blog
GET/api/v1/public/profiles/{slug}/blog/{post-slug}View published blog post
GET/healthHealth check