meradomo-engine crate instead
(docs), which wraps the local surface below.
There are two surfaces:
Local engine API
On
http://127.0.0.1:8765 — what your on-device app calls to publish itself, read status,
attach to the shared engine, and manage who else can reach it. Localhost-only. The publish
and engine tiers are open; the People tier needs a capability. See
Agent API, Embed the engine and
Sharing.Connect API (OAuth)
On
https://account.meradomo.com — the OAuth 2.0 + PKCE endpoints your remote client uses to
obtain an access token. See Connect with Meradomo.Authentication
- Publish API: none — it binds loopback only, so being a local process is the boundary. Never expose port 8765 to the network.
- Connect API: OAuth 2.0 authorization-code + PKCE (S256). Confidential clients also send a
client_secret. Access tokens are Ed25519 JWS, verified by the agent on every request.
api-reference/openapi.json).