Connection
Authorization
OAuth 2.1 with PKCE (S256). The user signs in on leadreef.ai and approves the client there; the client never sees the password. Unauthenticated requests get 401 with a WWW-Authenticate header pointing to the resource metadata below.
Scopes
Rate limits
Per user, across all connected apps. Over a tool limit, the call returns RATE_LIMITED with the seconds to wait.
Tools
9 tools. Only start_search spends anything; every other tool reads the account and is free. Every tool returns structured content matching its output schema, plus a short text summary.
Errors
Auth and transport failures come back as HTTP status codes. Everything else is a tool result with isError: true and a body with code, message, retryable and request_id, so the AI can explain the problem to the user.
Client setup guides
Step-by-step guides for specific apps. Other clients are covered on the setup page.
Changelog
How LeadReef handles your data: privacy policy. Machine-readable version of this page: docs.md.