# Gamer Sites: agent integration context

Reviewed 2026-10-24; source 82cf65879b5fa09800bc0d4fc5e31557332cabbe.

Read https://gamersites.gg/developers/ for the complete human reference. Full reference JSON: https://gamersites.gg/wp-content/uploads/gs-api-docs/reference.json . Curated OpenAPI: https://gamersites.gg/wp-content/uploads/gs-api-docs/openapi.json . The OpenAPI server is a reserved placeholder. Use only the existing authorized API origin and authentication flow. Documentation grants no access. Never create credentials, grant permissions, send test messages, publish rules or change a runtime just to explore.

- Source: aero_api/server.py, gamer_sites/{identity,aero,community_modules,rules,going_live,store}.py; aero_shared/{settings,logging,temp_voice,rules,live}.py.
- Session API uses __Host-gs_session, not generic Bearer. Mutations need exact API Origin and current X-CSRF-Token from /api/v1/me.
- /me memberships[].permissions is a JSON-encoded string array in this revision. Community UUID is distinct from Discord guild ID.
- Aero reads need community.aero.view; writes also need community.aero.manage and current Discord guild management authority.
- GET Aero state first. Base save: {expected_version,settings} nonempty patch. Module save: {expected_version,config} complete validated config. Read actual validators before constructing modules.
- 409: reload and reconcile. 503/timeouts may follow an executed action; inspect state/receipt, preserve test request_id, never blindly resend.
- Release owner previously verified this API contract with bot a582a75. A newer API revision may be running; this reference is pinned to reviewed source and does not claim current running-image identity. Reviewed source removes the obsolete capability requirement. Verify current runtime revisions before future module changes.
- Rules publish and logging/live test are real effects. No public try-it. Optional MCP/private chat are separately mounted and room-granted, not open general agent access.
- Reviewed source was isolated. Running image revision and authenticated acceptance were not verified by this docs task; no API deployment or changes occurred.

Examples use synthetic IDs and example domains. Do not log tokens, CSRF values, cookies, customer data or private infrastructure. Re-read source after a release.

Public API origin: https://aero.gamersites.gg . Documentation origin is separate; it neither proxies requests nor shares API sessions. This document grants no shared account or access. Agents need their own integration's existing approved identity and permissions; do not reuse another person's cookie or copy credentials to work around a missing contract. No generic Bearer-token integration is established for community-session routes.

Website publication target: existing https://gamersites.gg/developers/ root page only. Docs publication does not deploy the API or prove per-account/guild acceptance.