# SiberMate Developer Platform

> API and MCP documentation for integrating AI assistants, automation agents, and security awareness workflows with SiberMate.

SiberMate helps teams run security awareness programs across learners, training, phishing simulations, policies, breach exposure, and reporting. The developer platform exposes a public REST API and a remote MCP server for tenant-scoped automation.

## Core Docs

- [Developer Docs](https://docs.sibermate.com/): REST API reference and integration overview.
- [Remote MCP Guide](https://docs.sibermate.com/mcp): Setup guide for connecting MCP-compatible AI clients to SiberMate.
- [OpenAPI JSON](https://api.sibermate.com/v1/openapi.json): Machine-readable REST API contract.
- [Sitemap](https://docs.sibermate.com/sitemap.xml): Crawlable docs URLs.

## MCP Endpoints

- [Remote MCP Server](https://mcp.sibermate.com/mcp): Streamable HTTP MCP endpoint with OAuth discovery.
- [Guided MCP Setup](https://mcp.sibermate.com/setup): Browser fallback for clients that cannot launch OAuth automatically.

Use `https://mcp.sibermate.com/mcp` as the MCP server URL. Do not use `/setup` as the MCP server URL.

## Authentication

- REST API: `Authorization: Bearer <SIBERMATE_API_KEY>`
- Remote MCP recommended flow: OAuth discovery from `https://mcp.sibermate.com/mcp`
- Remote MCP fallback: clients that support custom headers may use `Authorization: Bearer <SIBERMATE_API_KEY>`

Use a dedicated tenant API key for automation and keep keys out of repositories, logs, screenshots, and shared prompts.

## Automation Scope

SiberMate MCP can support AI-managed security awareness routines such as:

- Learner onboarding, updates, activation, deactivation, group membership, and cleanup.
- Course and gap analysis assignment, reminder, and removal workflows.
- Policy upload, draft creation, template-based creation, publishing, assignment, reminders, removals, and cleanup.
- Tenant, learner, group, course, report, simulation, policy, and breach visibility.

Mutation and destructive actions should be planned first and confirmed by the user or host automation policy before execution.

## More Context

- [Full LLM Context](https://docs.sibermate.com/llms-full.txt): Expanded guidance for AI agents and documentation crawlers.