# A REST API and an MCP server for other agents

> 2026-11-02, App: Space admins make scoped API keys in Koshra; the secret is shown once and only a hash is stored; REST endpoints for bots, the Tasks board and task status, with an OpenAPI 3.1 spec; An MCP server with list_bots, read_tasks_board, get_task_status and create_task; Work that needs approval never starts from a key; A public health check and status feed, checked every 5 minutes.

Canonical: https://koshra.com/changelog/2026-11-02_a_rest_api_and_an_mcp_server_for_other_agents
Last updated: 2026-11-02

Date: 2026-11-02
Area: App

- Space admins make scoped API keys in Koshra; the secret is shown once and only a hash is stored
- REST endpoints for bots, the Tasks board and task status, with an OpenAPI 3.1 spec
- An MCP server with list_bots, read_tasks_board, get_task_status and create_task
- Work that needs approval never starts from a key
- A public health check and status feed, checked every 5 minutes