# CodeRifts

> Risk-aware API compatibility governance. Four PR gates (API contract, schema migration, auth surface, workflow actions) plus a deterministic agent verdict API and MCP server.

## Docs

- [API docs](https://app.coderifts.com/api/docs): REST endpoints, Decision Spec v1.0
- [MCP manifest](https://coderifts.com/mcp.json): 3 MCP tools with annotations
- [For agents](https://coderifts.com/for-agents): integration quickstart
- [Agent quickstart](https://coderifts.com/agents/quickstart/): step-by-step

## Try it

- [Public preflight](https://app.coderifts.com/api/docs#public-preflight): no-auth check
- [Public ActionGuard check](https://app.coderifts.com/api/docs#public-actionguard-check): no-auth workflow diff check

## Ask our documentation (AI Search)

- [Docs search MCP](https://91e8f0b5-daeb-4ba7-9114-69956d8d3f96.search.ai.cloudflare.com/mcp): query CodeRifts docs in natural language via MCP (POST)
- [Search endpoint](https://91e8f0b5-daeb-4ba7-9114-69956d8d3f96.search.ai.cloudflare.com/search): POST a query to search the docs

## Key docs

- [Features](https://coderifts.com/features/)
- [What is MCP tool poisoning?](https://coderifts.com/what-is-mcp-tool-poisoning/): definition, a before/after poisoned-manifest example, and how the CodeRifts poison gate BLOCKs it at merge time
- [What is API blast radius?](https://coderifts.com/what-is-api-blast-radius/): definition, why it matters more than a diff, and how CodeRifts scores it as one of the four risk dimensions
- [What is API contract governance?](https://coderifts.com/what-is-api-contract-governance/): definition, how it differs from linting and diffing, and the gates CodeRifts runs at merge time
- [Reproduce our verdicts](https://coderifts.com/): deterministic verdicts, reproducible by curl, Ed25519-signed

## Product MCP (the verdict engine, distinct from docs search)

- [Verdict MCP server](https://app.coderifts.com/mcp): agents call the action-verdict engine directly
- [Well-known manifest](https://app.coderifts.com/.well-known/mcp.json)
- [Receipt verifier](https://github.com/coderifts/receipt-verifier): verify Ed25519 chain receipts independently (Node + Python, open source)