Services
| Component | Local Address | Responsibility |
|---|---|---|
| Web | http://localhost:3000 | Browser user interface |
| REST API | http://localhost:3001 | Public application API boundary |
| MCP | http://127.0.0.1:3002/mcp | Goal and label tools for AI agents |
| Docs | http://localhost:3003 | Product and engineering documentation |
| PostgreSQL | localhost:5432 | Local relational data store |
/sign-in provides email registration and login, and /home is protected.
The authenticated application loads the current user from the REST API, provides
logout from the sidebar account menu, and manages scoped API tokens under
/settings/api-tokens. The API creates the user's first organization during
authenticated-session bootstrap and persists active-organization switching.
Organization and Team settings expose administrator-authorized organization
renaming and membership-role management.
Health checks
The REST API and MCP service expose GET /health on their respective origins.
API contracts
The REST API reference is generated from its OpenAPI document.
Authentication uses the canonical /v1/auth/* routes described in
Authentication.