RetrySight Docs lite
Local API
RetrySight Lite exposes REST, GraphQL, and MCP on 127.0.0.1:18081 with loopback-only defaults.
On this page
Lite’s backend is bundled in the desktop app. By default it is not exposed on your LAN.
Endpoints
| Surface | Default |
|---|---|
| Base URL | http://127.0.0.1:18081 |
| REST | Same origin, versioned HTTP API |
| GraphQL | Queries plus live subscriptions (taskUpdated, agentHeartbeat) |
| MCP | Local MCP server for Cursor / VS Code — see MCP |
Security defaults
- Bound to
127.0.0.1— no network exposure unless you change that - Host-header guard blocks DNS rebinding while on loopback
- Admin token stored in OS secure storage (Keychain, DPAPI, or libsecret)
- Session data lives under your user profile
Do not bind the Lite API to 0.0.0.0 on a shared workstation unless you understand the access model.
Using the API
- Launch RetrySight Lite so the backend is running.
- Copy the admin token from the app (MCP screen or settings).
- Call REST or GraphQL with that token.
Packaged installs generate ready-made MCP JSON from the app. Dev clones set RETRYSIGHT_URL and RETRYSIGHT_TOKEN as in the MCP guide.
Related
Lite security notes cover the same loopback controls in the product security model.