# Caspar Manufaktur – Developer Documentation

> Scoped context for API and integration documentation

## NLWeb /ask API

Endpoint: https://www.caspar-manufaktur.de/ask
Method: POST
Auth: none
Content-Type: application/json
Body: {"query": "your question"}
Response: JSON with _meta.response_type, _meta.version, answer, sources

Streaming: POST https://www.caspar-manufaktur.de/ask/stream
Accept: text/event-stream
Events: start, result, complete

## OpenAPI Specification

https://www.caspar-manufaktur.de/.well-known/openapi.json

## Authentication

https://www.caspar-manufaktur.de/auth.md
agent_auth: not_supported — human-mediated B2B service

## MCP Server

https://www.caspar-manufaktur.de/.well-known/mcp/server-card.json
Server URL: https://www.caspar-manufaktur.de/mcp/

## Rate Limits

X-RateLimit-Limit: 100 requests per minute per IP
Retry-After: 60 seconds on 429


<!-- CASPAR-API-POLICY-START -->
## API versioning and deprecation policy

- [Unified Caspar Manufaktur OpenAPI specification](https://www.caspar-manufaktur.de/.well-known/openapi.json)
- [API versioning, deprecation and operations policy](https://www.caspar-manufaktur.de/api-policy/)
- [API policy as Markdown](https://www.caspar-manufaktur.de/api-policy.md)

REST API version: /wp-json/caspar-agent/v1/. Planned breaking changes use a new
major version. Planned version sunsets are announced at least 90 days in advance;
urgent security changes may require shorter notice. No v1 sunset is currently
scheduled. Handoffs require Idempotency-Key; the existing response is cached with
a 24-hour transient expiration, subject to early cache eviction. Public read
endpoints require no API key. All production requests require human review.
<!-- CASPAR-API-POLICY-END -->