Start here
Write access
REST writes go live. MCP still previews until you confirm.
New tokens are read-only. Turn write on in Settings → API. Then these three POSTs are live:
POST /contacts/{id}/messages— this sends.POST /reviews/{id}/draft— this drafts. It does not publish.POST /actions/{id}/decide— this sends when the action is a follow-up.
REST vs MCP
REST does not wait for a second confirm. MCP still previews until you say so in the agent.
Idempotency on texts
Send Idempotency-Key on POST /contacts/{id}/messages. The same key returns { sent: true, replayed: true } instead of a second text.
403 read_only
Write is off on this key. Turn it on, or stay on GET. Agents hitting MCP with write off still get a preview.