Developer overview

Three ways in, one domain model. Every call runs as a real person, under that person’s grants.

MCP server

Point an agent at /mcp for 25 tools over Streamable HTTP. The most complete way in.

REST API

More than 470 operations under /v1. Read them at /v1/docs.

OAuth apps

Docket’s public API is in early access. There is no SDK, and the API is unversioned. Read Platform status first.

MCP, REST, or an OAuth app

You are building	Use
An AI agent that works in Docket	MCP
A script that syncs something nightly	REST
A product other Docket users install	OAuth app + MCP or REST
An integration that reacts to changes	REST plus the SSE stream

Call capture and “email the caterer by Friday” becomes a task. organize writes a twelve-item plan in one call, and a second run creates no duplicates.

The model in one screen

Docket scopes every row to one Organization, the tenant boundary.

Organization
  ├─ Team          owns workflow states, cycles, and a triage queue
  ├─ Initiative    a theme; no work of its own; links to Programs and Projects
  ├─ Program       ongoing operations; contains Projects and Tasks
  ├─ Project       a bounded effort; contains Tasks and Milestones
  └─ Task          the atomic unit; subtasks, acyclic dependencies, attachments, labels

Use a Program for work that never finishes, like customer support. Use a Project for “Launch v2”, which closes when it ships. Cycles schedule Tasks into a team’s two-week window without containing them. Updates set health: on_track, at_risk, off_track. Two kinds of edge:

Kind	What it is
Containment	A hard parent-to-child edge. Grant someone `contribute` on a Program and it applies to every Project and Task in it.
Association	A soft link. Delete it and both sides remain. An Initiative themes a Project, a Cycle schedules a Task, a Task blocks a Task.

Workspaces relabel these words: a Cycle may display as a Season. The API always uses the default names. See Terminology.

Conventions every call follows


Identifiers	26-character ULIDs. They sort. Never parse them.
Pagination	Pass `cursor` and `limit`. Read `nextCursor`.
Errors	RFC 9457 problem documents. Branch on `code`, such as `dependency_cycle`. See Errors.
Idempotency	Send an `Idempotency-Key` header on unsafe operations.
Authorization	`view < comment < contribute < assign < manage`. Reassigning a task needs `assign`.

What a token can do

A token never grants more than the human behind it has. Docket checks the scope first, then that person’s own grants. Someone with view on “Launch v2” cannot write to it with a work:write token.

MCP server

REST API

OAuth apps

​MCP, REST, or an OAuth app

​The model in one screen

​Conventions every call follows

​What a token can do

MCP, REST, or an OAuth app

The model in one screen

Conventions every call follows

What a token can do