The API surface
Three surfaces. Each designed for a different context.
| Surface | Where | Auth | Use when |
|---|---|---|---|
Curiosity.Library SDK |
External (your machine) | API token | Connectors, batch exports, CI jobs |
| Custom Endpoints | Inside workspace (C#) | Session JWT or endpoint token | Business logic, graph + search + AI |
| AI Tools | Inside workspace (C#) | Inherits chat user's session | LLM-callable retrieval and actions |
Decision guide:
Writing a connector? → Curiosity.Library SDK + API token
Expose data to an external system? → Custom endpoint + endpoint token
Power a chat assistant? → AI tool + scope.CurrentUser
Run a periodic job? → Scheduled task
Build a custom UI? → Custom endpoints + user session JWT
All three surfaces share the same underlying graph, search, and AI APIs. The difference is where the code runs and how the caller authenticates.