---
title: One Move developer documentation
description: REST API, MCP servers, authentication and developer resources.
canonical: https://getonemove.app/docs
last-updated: 2026-11-05
---

# One Move developer documentation

One Move has a public, versioned REST API for chess and poker reports, a Streamable HTTP MCP server for agents, and machine-readable discovery documents.

## Start here

- [API reference](https://getonemove.app/docs/api): versioning, authentication, endpoints, pagination, jobs, errors and examples.
- [MCP server](https://getonemove.app/docs/mcp): the product server, the documentation server, server cards and tool names.
- [Authentication](https://getonemove.app/auth.md): the WorkOS auth.md walkthrough for agents.
- [Developer portal](https://getonemove.app/developers): quickstart, sandbox, API keys and rate limits.
- [Sandbox](https://getonemove.app/sandbox): a stable synthetic report for schema and retry tests.
- [OpenAPI 3.1 description](https://api.getonemove.app/openapi.json)
- [llms.txt](https://getonemove.app/llms.txt)
- [Agent instructions](https://getonemove.app/agents.md)

## Base URLs

- API: https://api.getonemove.app
- Versioned API: https://api.getonemove.app/v1
- MCP product server: https://api.getonemove.app/mcp
- MCP documentation server: https://api.getonemove.app/docs/mcp
- Website: https://getonemove.app

## First request

```bash
curl -sS https://api.getonemove.app/v1/constraints
curl -sS "https://api.getonemove.app/v1/free-reports/chesscom/hikaru?time_class=blitz"
```

A report may be ready immediately (HTTP 200) or queued (HTTP 202). Poll the returned `status_url` or `/v1/jobs/{job_id}` until it is ready.

## What is public

Public read endpoints require no key and are safe to call for any public chess username or any poker report id held by its owner. Write endpoints create a report request or a client, and are rate limited. There are no endpoints that can read another player's private account data.

## Versioning and deprecation

The stable surface is `/v1`. Breaking changes go to `/v2`. Additive fields may appear in `/v1` responses. Deprecated endpoints carry `Deprecation` and `Sunset` headers with an RFC 9745 date and stay available for at least 90 days. See https://api.getonemove.app/v1/deprecation.

## Rate limits

Every response carries `RateLimit-Limit`, `RateLimit-Remaining`, `RateLimit-Reset` and `RateLimit-Policy`. A 429 carries `Retry-After`. The default budget is 120 requests per minute per IP; report creation has a separate, stricter budget.