Developer docs

Topics

• React SDK and Web Component: Render approved proof and ask for stories inside your product.
• REST API: Authentication, idempotency, errors, pagination and every endpoint.
• Webhooks: Event types, signatures, retries and replay.
• MCP: Tools, resources, scopes and human approvals for agents.
• Imports and migration: Bring testimonials from files, other tools and public sources.
• Consent and customer control: What customers approve and how they change their mind.
• Incentives and disclosure: Participation rewards and the rules that keep them fair.
• Exports: Get all of your proof, its history and its consent records out.
• Analytics definitions: What each metric counts and how strong each claim is.
• Allowances and limits: What keeps working past an allowance, what pauses and resumes, caps, alerts and the daily safety ceiling.
• Source-governed integrations: the typed source API and MCP for attributed quotations.

Three rules that shape every interface

• Nothing a customer said is published until the customer approves the exact wording and the uses they choose. The customer can narrow or withdraw that permission later from a private link, without a YouSaid account.
• Machines propose and people decide. Service API keys and agents can read, draft and queue work. Approving, rejecting, managing consent, revoking directly and exporting raw originals are human actions in the workspace.
• Every public surface (render API, hosted page, Web Component, React components, media) reads the same signed manifest, and eligibility is evaluated again whenever that manifest is built. A revocation removes the proof from every YouSaid surface within five minutes.

Contracts

• /openapi-v1.yaml: signals, threads, features, inbox and the Proof API.
• /openapi-rooms-v1.5.yaml: Rooms, agent runs and approvals.
• /.well-known/sansa-mcp.json: the MCP manifest.
• /api/public/proof/automation-templates: Zapier, Make and n8n templates.