Developers · geliştiriciler

Plan API

Call the coaching plan routes on WingManReset. Keys are issued by the operator. This page is not a signup form and not a checkout.

Türkçe

Anahtar self-servis formla alınmaz. Operatör sunucudaki WINGMAN_API_KEYS değerine yazar. Kayıt ekranı ve ödeme yoktur. Daha sonra ücretsiz bir soft launch açılabilir; bugün abonelik satılmaz.

Taban adres https://wingmanreset.com. Siteyi kendi tarayıcınızda açınca istek anahtarsız gider. curl ve başka sunucular anahtar gönderir.

Yanıtlar koçluk metnidir. Tıbbi tavsiye, tanı, terapi, acil müdahale veya doz değildir. İlaç, hormon veya takviye dozu istenmez. Ayrı bir bot listelemesi bu API'nin canlı paylaşımı değildir.

Base URL

https://wingmanreset.com

People running the repo locally use http://127.0.0.1:8900. That is the same app. The public contract is the HTTPS host.

How to get a key

No signup UI and no card checkout. The operator puts a secret in /root/WingMan/.env, which the systemd unit already loads, then restarts wingman.service.

WINGMAN_API_KEYS=paste-first-hex,paste-second-hex

Profile routes can name a bot on that same variable, for example reset:<key>, diet:<key>, exercise:<key>, nature:<key>, supplement:<key>, admin:<key>, and mobile:<key> for the public phone app. A raw key with no name still works. The client sends the secret only, not the name. The mobile key can call the Today plan routes and its own profile. It cannot call admin routes.

Generate a value with openssl rand -hex 32. Do not commit it. To ask for a key, write to wingmanadhd@gmail.com. That address does not issue keys automatically. A later soft launch may be free. This page does not name a price.

Same-origin or key

Caller	Send
Browser on wingmanreset.com or www	No key. The browser sends Origin.
Browser on 127.0.0.1:8900	No key.
curl, a server, a phone app, another site	Authorization: Bearer or X-Api-Key

Health

Public. Still rate limited.

curl -sS https://wingmanreset.com/api/health

One keyed plan call

Coaching context only. Not a clinical diet.

curl -sS -X POST https://wingmanreset.com/api/diet/plan \
  -H "Authorization: Bearer $WINGMAN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"age":44,"gender":"male","dietary_pattern":"mediterranean","meals_per_day":3,"goal_direction":"stabilize"}'

X-Api-Key: $WINGMAN_API_KEY is the same credential. Other plan routes use the same headers. The route list is docs/openapi.yaml in the repository. Foundation plans: diet, exercise, recovery, nature, and POST /api/foundation/daily-plan. Daily conductor: POST /api/orchestrator/daily-command.

A missing key is HTTP 401, api_key_required. A mobile key on a route it cannot call is HTTP 403, scope_forbidden.

Rate limit

Health and plan routes share 120 requests per 60 seconds per IP by default. A key does not raise the cap. Over the limit the response is HTTP 429, rate_limited.

Safety

• Coaching and self-management. Not medical advice, diagnosis, therapy, or emergency care.
• Not a diet prescription, a clearance to train, or a supplement, hormone, or medication dose.
• Chest pain, breathing trouble, fainting, or self-harm thoughts: stop and use local emergency services. Turkey: 112. United Arab Emirates: police 999, ambulance 998, fire 997. Hong Kong: 999.
• Money routes are educational. Not investment, tax, or credit advice.

Meal logs, CRM, scheduler, hooks, chatbot, and prescription upload are not part of this developer contract.