Kanorio Developer Portal

Use Kanorio as a full hosted website or as a headless content, commerce, membership, and digital-delivery backend for your own Next.js, Astro, or mobile storefront.

API & Component Surfaces

Every specification below is generated directly from machine-readable OpenAPI schemas and event registries.

Three Credentials & Three Distinct Rights

Kanorio strictly separates credentials by caller and keeps operational permissions, customer entitlements, and plan entitlements distinct.
1. Content Delivery (Public)Anonymous

Browser-safe reads at https://{site}/api/v1/*. Draft preview uses read-only X-Kanorio-Preview: knr_pv_... on your server.

2. Management & MCPServer Only

Personal Access Tokens (knr_pat_) and OAuth 2.1 (knr_at_) evaluate operational RBAC (lib/permissions). Never expose in browser bundles.

3. Customer SessionBuyer Scoped

Customer Bearer tokens (knr_cat_) identify a single (websiteId, contactId) and evaluate commercial Entitlements (separate from team RBAC and SaaS plan tiers).

7 Business Primitives at a Glance

Full 12-domain matrix
Check which primitives are ready for your architecture before you start.

Guides & Machine-Readable Discovery