API Overview
This page has been cleared and is ready for updated Builder Studio documentation.
BuilderStudio is automated primarily through its MCP gateway — a single Model Context Protocol endpoint that exposes your workspace as tools for Claude Code, Cursor, Codex, and other MCP clients. Alongside the gateway, a small set of plain HTTP endpoints lets you trigger and read workflow executions, inspect canvases, verify keys, and export billing data without an MCP client.
The three surfaces
- MCP gateway —
POST /api/mcpon the BuilderStudio app. A JSON-RPC Model Context Protocol endpoint. Authenticate with a workspacebuilder_API key (or an OAuth 2.1 bearer token) and call the BuilderStudio tool surface: list canvases, author workflows, trigger runs, manage assets, manage keys, and read billing. This is the surface MCP clients connect to. - Direct HTTP endpoints — a focused set of routes (
/api/run,/api/canvases,/api/executions,/api/verify-key,/api/billing/*, and the MCP tool-backing/api/mcp/*routes) you can call directly with the samebuilder_key when you do not want to run an MCP client. - Execution & webhooks — workflows are triggered programmatically via
/api/runor by inbound webhook triggers, and they can push results back out via callback URLs. See Webhooks.
How requests are authenticated
Every programmatic surface uses bearer authentication with a workspace-scoped builder_ key. The key both identifies the workspace and carries the scopes that gate what each call can do. Read Authentication for the key families and the full scope list.
curl -H "Authorization: Bearer builder_..." \ https://<your-convex-deployment>.convex.site/api/canvasesMCP gateway at a glance
Endpoint: POST /api/mcp (BuilderStudio app origin)Protocol: JSON-RPC over HTTP (Model Context Protocol)Auth: Authorization: Bearer builder_... (or OAuth 2.1 bearer)Methods: POST (RPC), GET / DELETE (session transport), OPTIONS (CORS)Scopes: read:canvases, read:assets, run:workflows, write:canvas, write:assets, delete:canvas, delete:assets, manage:integrations, read:billingFor client setup snippets (Claude Code, Cursor, Codex) see Builder MCP & CLI. For published third-party MCP servers and workspace installs, see the Marketplace.
Where to go next
- Authentication — key families, scopes, bearer auth.
- Endpoints — the routes that actually exist.
- REST API — what the direct HTTP surface is (and is not).
- Webhooks — inbound triggers and outbound callbacks.
- Billing & Usage Export — FOCUS export and credit balance.
Was this page helpful?