Authentication
Project API tokens use Bearer authentication. The plain token is shown once when created. Lexique stores token metadata and a hashed secret, not the original plain token.
Authorization: Bearer lxq_pjt_<selector>_<secret>
Supported endpoints
- GET `/api/projects/{id}/meta` returns project sync metadata and capabilities.
- GET `/api/projects/{id}/translations/pull` returns entries and rendered files.
- POST `/api/projects/{id}/translations/push` updates existing keys or creates missing keys when allowed.
Agent-ready contract
Use the public OpenAPI file at `/openapi.json` to configure agent tools. MCP wrappers should expose narrow tools around the same endpoints, such as `get_project_meta`, `pull_translations`, and `push_translation_updates`.
For agent writes, use a token with the smallest scope needed, keep project IDs explicit, and review diffs before committing exported files back to a repository.