Free your curl

The speed of an API with MCP discovery. Two tools tell your agent what it can call and where the key lives. Then your agent calls the API directly.

Your agent already knows curl. It knows how to construct headers and bearer tokens. It can process the response. The only thing it doesn't have is the list of tools, context, and how to log in — that's all Joshua provides.

Two tools, then we step aside.

list_user_tools and fetch_user_tool. Authenticate with Bearer <api_key>. After fetch, your agent makes the real HTTP request.

Joshua never sees your keys.

We store a pointer — env var name, 1Password path, Doppler ref. Your agent resolves the credential at call time.

what your agent does
# 1. discover what's registered
agent → joshua: list_user_tools()
  ← [{ id: "a1b2…", slug: "stripe", auth_type: "bearer" }, …]
# 2. get the spec + where the key lives
agent → joshua: fetch_user_tool("a1b2…")
  ← {
      spec: "openapi: 3.0.0\n…",
      auth_block: {
        type: "bearer",
        source: "env",
        key_name: "STRIPE_API_KEY"
      },
      user_context: "Production. Real transactions only."
    }
# 3. resolve the key from your vault, env, or your own system,
#    call the API and free your curl
agent → stripe:
  curl https://api.stripe.com/v1/charges \
       -H "Authorization: Bearer $STRIPE_API_KEY"
  ← { id: "ch_3M…", amount: 2000, status: "succeeded" }

Joshua tells the agent what's available and where the key lives. The agent does the rest. No proxy. No version drift. See the full flow →

Verified catalog (18)

Propose a tool →

popularmost used

AgentMail

Email inboxes for AI agents — create inboxes, send/reply/forward messages, manage threads, drafts, webhooks, domains, and API keys.

bearer verified

popularmost used

Apollo.io

Sales engagement + B2B contact/company data API. Search people and companies, enrich records, manage sequences.

bearer verified

popular

Resend

Transactional email API. Send, schedule, batch, list domains, manage API keys. Minimal surface; easy replacement for SendGrid/Postmark.

bearer verified

Cloudflare

Cloudflare REST API — DNS, Workers, R2, Pages, Zero Trust, Cache/Purge, WAF, Images, Stream, and account management.

bearer verified

Compresr

LLM context compression API — cut token costs by compressing query-agnostic, query-specific, or markdown context. Streaming and batch modes.

bearer verified

Didit

Identity verification platform — KYC, KYB, AML screening, document and biometric checks. Hosted sessions or server-to-server standalone APIs.

bearer verified

GitHub

Source control, issues, pull requests, Actions, and organization management. REST (v3) and GraphQL (v4) APIs.

bearer verified

HubSpot

CRM for contacts, companies, deals, tickets, and marketing. Private-app bearer auth; CRM v3 API with associations and batch endpoints.

bearer verified

InstantContext

Collaborative workspace for humans + AI agents — projects, artifacts, notes, todos, search, and messaging. Persistent context across sessions.

bearer verified

Linear

Issue tracking and project management. GraphQL-only API — queries and mutations for issues, projects, cycles, teams, and comments.

bearer verified

Notion

Pages, databases, blocks, and search across a Notion workspace. Block-structured content model; integration-based auth.

bearer verified

Orthogonal

API gateway for AI agents — one credential gives access to a catalog of third-party APIs with search, details, and run endpoints.

bearer verified

Render

Managed cloud platform API — services, deploys, environment variables, logs, custom domains, cron jobs, and Postgres instances.

bearer verified

Sentry

Error tracking and performance monitoring — query issues and events, manage projects, releases, alerts, teams, and dashboards.

bearer verified

Slack

Team messaging: post messages, manage channels, read conversation history, update user status. Bot + user tokens via Slack Apps.

bearer verified

Stripe

Payments, subscriptions, invoicing, and financial primitives. REST API with idempotency keys, webhooks, and test/live key separation.

bearer verified

Supabase

Management API for Supabase — projects, branches, database, edge functions, storage, orgs. Separate from the per-project PostgREST/Auth/Realtime clients.

bearer verified

Vercel

Deploy platform API — projects, deployments, domains, environment variables, logs, team/org management.

bearer verified