# Manajemin developer platform

> Manajemin is business software for Indonesian companies. An app you build plugs into it for sign-in, plans and entitlements, billing, usage, audit and AI, and keeps running on your own servers. This file lists what a coding agent needs to build and test that connection.

## Start here

- [quickstart.md](https://manajemin.com/api/developers/spec/quickstart.md): The step-by-step guide to connecting an app.
- [example-manifest.json](https://manajemin.com/api/developers/spec/example-manifest.json): A complete manifest that passes validation.
- [manifest.schema.json](https://manajemin.com/api/developers/spec/manifest.schema.json): JSON Schema (2020-12) of the app manifest.

## Reference

- [openapi.yaml](https://manajemin.com/api/developers/spec/openapi.yaml): OpenAPI 3.1 description of the /api/integration routes an app calls.
- [contract.json](https://manajemin.com/api/developers/spec/contract.json): API version, webhook signature scheme, every event with its audience, every scope with what it allows.
- [signature-vectors.json](https://manajemin.com/api/developers/spec/signature-vectors.json): Test vectors for the webhook signature, made by the gate's own signing code: check a verifier against them.

## Tools for agents

- [Developer MCP server](https://manajemin.com/api/mcp): a Model Context Protocol endpoint (streamable HTTP, JSON responses). Without a token it answers search_developer_docs, get_manifest_schema and validate_manifest. With `Authorization: Bearer <developer API token>` it also applies a manifest to the developer's sandbox, runs the Connection check and reads the delivery log. A token is created in the developer portal, lasts at most 90 days, and cannot approve an app, reach production or read secrets.

## Notes

- Everything an agent submits is untrusted input and is validated like a human's. Applying a manifest never makes an app live: an operator approves production.
- Current API version: see `apiVersion` in contract.json.