scorestory Public API

Version 1.0.0 · OpenAPI schema

Programmatic access to scorestory: create and configure surveys, invite participants, and read results.

Authentication

Two ways in, both bearer tokens in the Authorization header.

API token — for your own backend or script. Create one under Organisation → API tokens and send it as Authorization: Bearer scorestory_pk_.... A token belongs to one workspace and carries explicit scopes; call GET /public-api/v1/me to see what yours may do. The workspace is part of the credential, so no X-Company-Id header is needed.

OAuth 2.1 — for an AI assistant or an integration platform acting on behalf of a signed-in person. Discovery lives at /.well-known/oauth-authorization-server on the web origin; clients register dynamically (RFC 7591), use the authorization-code grant with PKCE, and refresh tokens rotate. The person approves a workspace and a set of scopes on a consent screen inside the app and can disconnect the client again under Organisation → API tokens → Connected apps. The access token (scorestory_at_...) reaches exactly the endpoints in this document.

MCP

An MCP server (Model Context Protocol, Streamable HTTP) is served at /mcp, protected by the same OAuth flow. Point Claude, ChatGPT or any MCP client at it and the person connecting it signs in once; the tools it exposes are task-shaped wrappers over the endpoints below.

Errors

Every error has a stable machine-readable shape:

{"error": {"code": "insufficient_scope", "message": "..."}}

Branch on code, never on message — messages are prose and may be reworded.

Rate limits

Limits are per token, not per IP. On 429 the Retry-After header says how many seconds to wait.

Versioning

This document is versioned; the paths are not. Fields are only ever added within a major version. A breaking change ships as a new version with notice.

Webhooks

There are none yet: scorestory does not call out to your systems. Poll the results endpoints for new completions.

invitations

Invitation links, personal and shared.

mailings

Bulk e-mail to participants.

properties

Participant properties, used to break results down by segment.

public-api

Endpoints specific to the published API.

respondents

Participants and their transcripts.

results

Scores, topics, quotes and trends.

surveys

Create and configure surveys.

topic-categories

Themes the interviewer explores.