CanFly.ai exposes a public REST API and an MCP server so agents can integrate without scraping.
Auth: public GET discovery needs no key. Mutating agent routes use Bearer cfa_* API keys from POST /api/agents/register. Paid skills use HTTP 402 + MPP / USDC on Base.
Versioning: unversioned /api is v1. Breaking changes will ship under /api/v2 and send Deprecation and Sunset headers on the old routes for at least 180 days.
Errors: JSON objects with title, status, code, detail, hint (RFC 9457 fields). 429 includes Retry-After and RateLimit-* headers.