Base URL and authentication
The REST API lives at https://app.wrendex.com/api. Authenticated calls use a personal API token, which starts with 'wrn_' and is sent as 'Authorization: Bearer wrn_...'. Mint a token from the workspace Settings page, or with POST /api/me/api-tokens while signed in. Each token carries scopes: READ covers search, reports, and crawl data; WRITE additionally allows starting or cancelling crawls and triaging alerts. Tokens identify a user, not a workspace; requests that touch a workspace carry the tenant or site id. Revoke a token from Settings at any time.
Endpoints that need no token
Five GET endpoints return JSON without authentication: /api/catalog (every check with ids, categories, and severities), /api/pricing (current tiers and credit packs), /api/changelog (shipped features and new checks), /api/status (the feed behind the public status page), and /api/health (liveness). Every other route under /api requires a bearer token or a signed-in session.
MCP server
Wrendex exposes crawl data as tools over the Model Context Protocol at https://app.wrendex.com/mcp using the stateless Streamable HTTP transport. Send the same bearer token on every request. To add it to Claude Code, run: claude mcp add --transport http wrendex https://app.wrendex.com/mcp --header "Authorization: Bearer <YOUR_TOKEN>". The workspace Settings page has a copy-ready version of this command.
MCP tools
Tools cover workspaces and sites (list_tenants, list_sites, get_site), crawls (list_crawls, get_crawl, enqueue_crawl, cancel_crawl, recrawl_pages), findings and reports (get_crawl_issues, get_crawl_issue_summary, get_crawl_alerts, get_health_score, get_duplicate_code_regions), alert triage (ignore_alert, unignore_alert), and search. The tools that mutate data (enqueue_crawl, cancel_crawl, recrawl_pages, ignore_alert, unignore_alert) need a token with the WRITE scope; the rest work with READ.
Discovery for agents
Machine-readable discovery follows RFC 9727: /.well-known/api-catalog on wrendex.com is a linkset that points at the REST API, the MCP server, this page, and the status endpoint. /llms.txt is a curated index of the site for language models, and /agents.md is a plain-language guide for AI agents covering authentication, public endpoints, and etiquette. The sitemap at /sitemap.xml lists every indexable page.
Limits and etiquette
Starting a crawl consumes the workspace's credits, so agents should only enqueue one when a user asked for it. Do not scrape dashboard pages; the API and MCP tools return the same data as structured JSON. For how the Wrendex crawler itself throttles and how to allow-list it, see /docs/rate-limits.