Bonus — Tale for developers
The builder's lap - scoped API keys, the four API doors, webhook triggers, external coding agents in sandboxes, and the run-code policy that keeps everything contained.
1 min read
Everything the series showed has an API underneath. The bonus episode walks the developer surface: named, revocable API keys; REST, MCP, WebDAV, and sandbox runtimes; webhooks that fire agents from any system; the external coding agents — Claude Code, Cursor — working in sandboxes; and the run-code policy that names what may install and where code may connect. Power tools, contained blast radius.
What the episode shows
| At | Scene |
|---|---|
| 0:14 | API keys: named, scoped, revocable, audited |
| 0:29 | Four doors: REST, MCP, WebDAV, sandbox runtimes |
| 0:44 | Webhooks: any system can fire an agent |
| 0:59 | Coding agents in sandboxes: Claude Code, Cursor, and peers |
| 1:17 | The run-code policy: packages, hosts, fail-closed |
| 1:35 | Power tools, contained blast radius |
Where to go next
The develop overview maps the whole surface; the API reference and webhooks carry the contracts. For the sandboxed agents, read external agents and the run-code policy.