# Herma
Public MCP and /api/preview require no key. Private /v1 routing and management require scoped hmk_ credentials. Personal assistants are supported. Read /connect.json; tracked artifact persistence uses your own Tessera tan_ session or tsk_ key.

> Context-shimming AI middleware for configurable coding harnesses -- intercepts requests via keyword, semantic, or micromodel rules to respond directly or shim caller-isolated noun, verb, and URI context before LLM execution.

- Base URL: https://herma.ta-amps.workers.dev
- Full Reference: https://herma.ta-amps.workers.dev/llms-full.txt
- Agent Card: https://herma.ta-amps.workers.dev/.well-known/agent-card.json
- Stateless MCP JSON-RPC: POST https://herma.ta-amps.workers.dev/mcp
- Read-Only Preview: POST https://herma.ta-amps.workers.dev/api/preview
- Health: GET https://herma.ta-amps.workers.dev/healthz

## Core Authenticated Endpoints (`hmk_` Harness Key Required)
- `POST /v1/handshake`: Negotiate Surface Handshake v1.0 limits (`X-Surface-Id`).
- `POST /v1/conversations/turn`, `GET /v1/conversations/{id}`: Optional typed work dialogue using caller-visible work contracts, expected_version and request_id. Returns a clarification, proposal or blocker with executed:false. Check work_conversations.enabled in /connect.json; requires hmk_ route scope.
- `POST /v1/dry-run`: Inspect caller-isolated augmented payload, matches, entities, and receipt.
- `POST /v1/chat/completions`, `POST /v1/responses`, `POST /v1/messages`: Multi-wire shim or direct-response proxy.
- `GET|POST /v1/context`, `GET /v1/provisions`, `PUT|DELETE /v1/provisions/{prov_id}`: Caller-scoped atomic CAS CRUD (`system_builtin` protected with 403).
- `GET /v1/memory`, `POST /v1/outcomes`, `GET /v1/insights`: Deterministic Anti-RAG working entity memory and reviewable candidate rules.