# Vision Core developer access

Machine clients, credentials, token issuance, installed Apps, organization context, public keys, and allowlisted publication retrieval. On live Vision, POST /oauth/token and the /.well-known documents answer; the /vision-core/v1 reads answer 404 until they open.

- **Lifecycle:** preview
- **Runtime:** acceptance-gated
- **Owner:** Vision Core
- **Audience:** Vision Platform audience
- **App entitlement:** vision-core
- **Workspace:** Vision organization and installation context

## Authority boundary

Vision owns machine identity and common API policy. Source Apps retain their resource and business authority.

## Approved interfaces

- **Platform API** (OPENAPI 1.0.0-preview.8) — [approved artifact](/openapi-vision-core-v1.json); SHA-256 `e696d48690f5bd5983b044fb77eff04f29d112a51fe150409c1542386d1b74d3`

Documentation completeness does not change lifecycle or runtime availability.