# Stalkr > Stalkr monitors mentions across supported sources. Its complete agent surface is available through a scoped REST API, authenticated MCP server, and signed webhooks. ## Agent endpoints - [Developer documentation](https://www.stalkr.ai/docs): Architecture, setup, security, and all feature references - [Quickstart](https://www.stalkr.ai/docs/quickstart): First API call and MCP connection - [REST API](https://www.stalkr.ai/docs/api): JSON API conventions - [MCP server](https://www.stalkr.ai/docs/mcp): OAuth-enabled MCP at https://www.stalkr.ai/mcp - [Webhooks](https://www.stalkr.ai/docs/webhooks): HMAC signatures, events, and retries - [OpenAPI 3.1](https://www.stalkr.ai/openapi.json): Machine-readable REST schema - [Full LLM documentation](https://www.stalkr.ai/llms-full.txt): Expanded agent-oriented documentation ## Capability groups - projects: list_projects, get_project, create_project, update_project, archive_project, list_project_members, invite_project_member, update_project_member, remove_project_member - keywords: list_keywords, create_keyword, update_keyword, delete_keyword, list_keyword_groups, create_keyword_group, update_keyword_group, delete_keyword_group - mentions: search_mention_authors, list_mentions, get_mention, update_mention_status, get_mention_analytics, list_categories, create_category, update_category, delete_category, list_mention_views, create_mention_view, update_mention_view, delete_mention_view - alerts: list_alerts, create_alert, update_alert, delete_alert - integrations: get_linkedin_integration, get_linkedin_connect_url, select_linkedin_page, sync_linkedin, disconnect_linkedin - account: get_account, update_account, delete_account - usage: get_usage - webhooks: list_webhooks, create_webhook, update_webhook, delete_webhook, test_webhook, list_webhook_deliveries, replay_webhook_delivery ## Important constraints - Authenticate with a Dashboard-created Bearer API key for REST, or OAuth 2.1 with PKCE for ChatGPT/MCP. - Every operation enforces scopes and current project membership. Inaccessible tenant resources are hidden as not found. - Use an idempotency key for writes. Honor Retry-After and existing plan/provider limits. - Trial users can use every agent feature; lower machine rate ceilings and existing usage caps prevent abuse. - Destructive operations require explicit tool input and should be confirmed with the user.