spin (Go port, local)

MCP — /mcp

• Landing page
• OAuth discovery · Resource metadata
• Authorize (paste seeded API key)

Auth — /auth

• Landing page
• /auth/login — redirects to Cognito (won't resolve locally without a real Cognito or Google client)

Platform API — /api/v1/*

Most endpoints require a caller identity. In local dev with SPIN_DEV_MODE=1, pass X-Spin-Dev-Email: dev@axelerant.com. JSON endpoints — view in browser dev tools or curl.

• GET /api/v1/projects — list projects
• GET /api/v1/groups — list groups
• GET /api/v1/markdown — list markdown files
• POST /api/v1/markdown/preview — render markdown to HTML

Internal

• /_/healthz
• POST /_/cron/lifecycle — scheduled cleanup
• POST /_/cron/cost-report — weekly Slack post (LocalStack lacks Cost Explorer, will fail)