Developer portal

Public APIs on the Comunidad App marketing site for AI agents and integrators: contact (Turnstile required), MCP, and discovery documents. The manager panel (gestor.comunidadapp.es) is a separate authenticated application and is not part of this surface.

Quickstart

The public contact form is the way to send a message. Cloudflare Turnstile is required. There is no OAuth registration or machine token.

Send a message from /contacto/ with a valid Turnstile token.

OpenAPI specification

The OpenAPI 3.1 document describes the public endpoints. Use it to generate clients or so an agent can understand the API automatically.

• /openapi.json
• /api/openapi.json
• /api/openapi.yaml

Sandbox

The staging host mirrors the same API, OpenAPI, and MCP routes. Use it for agent testing without touching production traffic.

https://new.comunidadapp.es

MCP

The MCP server exposes the contact_comunidadapp tool (it does not send email) and a UI that links to the public Turnstile form.

• /mcp
• /.well-known/mcp/server-card.json

Rate limits

Public POST endpoints are rate-limited per IP. A 429 includes Retry-After and RateLimit-* headers. This is application-layer protection; volumetric DDoS still belongs at the firewall / Cloudflare edge.

Endpoint	Limit
POST /api/contact	8 / hour / IP
POST /mcp	60 / minute / IP

Endpoints

• OpenAPI JSON — /openapi.json
• OpenAPI YAML — /api/openapi.yaml
• MCP endpoint — /mcp
• MCP server card — /.well-known/mcp/server-card.json
• Sandbox — https://new.comunidadapp.es