{
  "resource": "https://www.usesmallware.com",
  "resource_name": "Smallware API",
  "scopes_supported": [
    "org.create",
    "project.create",
    "deploy",
    "model.resolve"
  ],
  "bearer_methods_supported": [
    "header"
  ],
  "resource_documentation": "https://www.usesmallware.com/developers",
  "resource_policy_uri": "https://www.usesmallware.com/privacy",
  "resource_tos_uri": "https://www.usesmallware.com/terms",
  "x_smallware_scope_descriptions": {
    "org.create": "Create an organization on behalf of a customer identified by email address. The customer owns it from creation; the credential holder does not become a member and does not gain access to the organization's data.",
    "project.create": "Create a project inside an existing organization and provision its machine, database, and system hostname. Does not grant access to the project's data or secrets.",
    "deploy": "Upload a build artifact for an existing project and deploy it. Does not grant project creation, secret reads, or organization changes.",
    "model.resolve": "Resolve which model provider serves a given (organization, model) pair and read that organization's stored provider key. Held only by the model proxy; kept separate so a deploy credential cannot read customer provider keys."
  },
  "x_smallware_credentials": [
    {
      "type": "userApiKey",
      "token_prefix": "pk.",
      "self_serve": true,
      "description": "A personal bearer token. Any signed-in user mints one in the dashboard in two clicks — no form, no approval, no sales contact. It carries the user's own role on every organization they belong to; it does not carry named scopes, and it cannot exceed what the user can already do in the dashboard. Revoke a single token without affecting the others.",
      "mint_url": "https://www.usesmallware.com/dashboard/account/cli-tokens"
    },
    {
      "type": "platformCredential",
      "token_prefix": "plat.",
      "self_serve": false,
      "description": "A server-to-server credential for a partner service that provisions organizations and projects on behalf of customers. It carries an explicit list of named scopes and is refused for anything outside them. Issued by a Smallware operator, not self-serve."
    }
  ]
}