The platform exposes every plugin as a typed REST surface. Each plugin's page is rendered from artifacts/openapi/<key>.yaml via Redoc; the same spec drives the customer SDKs (TypeScript, Python, Go, Dart). Wire contract is documented in packages/README: every state-changing endpoint requires an Idempotency-Key header; every operation declares its required RBAC scopes; the error envelope is uniform across responses.