APIs / machine access
Developer Portal
API documentation, authentication guides, and agent resources for integrating with the Carter LaSalle portfolio.
Quick Start
Get started with the portfolio API in minutes. All endpoints are publicly accessible for read operations.
API Endpoints
/api/statusCheck API availability and health status. Returns JSON with status and service fields.
/api/contactSend a message through the portfolio contact form. Requires same-origin requests, rate limited to 5 requests per hour.
/mcpModel Context Protocol server (JSON-RPC 2.0 over Streamable HTTP). Exposes portfolio profile data as MCP tools.
Authentication
The portfolio API uses same-origin validation for the contact endpoint. No API keys are required for public read operations.
Same-Origin Policy
The /api/contact endpoint validates the Origin header to ensure requests originate from the portfolio domain. Cross-origin requests will receive a 403 response.
Rate Limiting
API endpoints are rate limited to prevent abuse. Rate limit headers are included in all responses.
Response Headers
RateLimit-Limit— Maximum requests per windowRateLimit-Remaining— Requests remaining in windowRateLimit-Reset— Unix timestamp when window resetsRetry-After— Seconds until retry (on 429 responses)
Agent Integration
The portfolio provides machine-readable endpoints for AI agent integration.
Error Handling
All error responses include structured JSON with machine-readable error codes and resolution hints.
{
"success": false,
"error": {
"code": "VALIDATION_ERROR",
"message": "Name must be between 2 and 100 characters.",
"resolution": "Check the request body fields match the required schema"
}
}Support
For API support or questions, contact carterlasalle@gmail.com or use the contact form.