Cockatoo for developers · API
Business websites, built into your workflow.
Create, edit and publish structured business websites through a single API. Cockatoo handles hosting, HTTPS and enquiry forms, while owners control access to their sites.
https://app.cockatoo.com.au/api/v1Make your first request.
The public catalog needs no account or token. Get the available templates, industries, style presets and a complete starter website document.
curl -fsS https://app.cockatoo.com.au/api/v1/catalogOpenAPI contract · Website document schema · Example website document
One flow, from draft to publication.
- Prepare the website. Read
GET /catalogand write a structured document with the business content. - Ask the owner to approve. Send the document and owner’s email to
POST /onboarding. Share the returnedapprovalUrlwith the owner and keep the continuation credential private. - Exchange approved access. Check
GET /onboarding/{id}, then callPOST /onboarding/{id}/exchangeonce approved to obtain a scoped API token. For a new owner, approving the handoff publishes the site immediately. - Manage and publish. Use the token to read the site, save changes, upload images and preview. Publish the intended revision, then confirm its publication state and live URL.
Authenticate with owner-approved access.
Send your API token as a Bearer token. Existing owners can also create a token in Agent access. Keep credentials on your server or in a secure local environment.
curl -fsS https://app.cockatoo.com.au/api/v1/site \
-H "Authorization: Bearer $COCKATOO_TOKEN"Read
sites:read grants access to the site, images, preview and publication state.
Edit
sites:write lets your integration create and save drafts and upload images.
Publish
sites:publish allows publishing and unpublishing. Owners can revoke access.
Built for a reliable handoff.
Safe retries
Send a unique Idempotency-Key with each write. Reuse that key only when retrying the same request.
Revision checks
Save and publish against the current revision. Reload and reconcile if another edit creates a conflict.
Clear outcomes
Read publication state to confirm the live URL. Errors include a code, request ID and retry guidance.
Requests are subject to rate, document and image limits. Respect Retry-After and check current state after an uncertain result. Read the full limits and error guidance.
Choose the interface that fits.
Use the API for direct integrations, MCP for AI assistants, or the CLI for command-line workflows. All use Cockatoo’s owner permissions and publishing service.
Start with free hosting, HTTPS, a Cockatoo address and an enquiry form. Explore plans and upgrades.
