Gecko — the API comprehension layer

control plane, never data plane

Gecko control plane — surface + tool defs + correctness metadata (never payloads) OpenAPI / docs the surface only Ingest normalize ops + params Catalog intent → endpoint Tools / MCP auth hidden first-call-correct Validator replay · FCC V2 seed AI Agent a goal, no API docs Access injects auth at call time The Real API data plane surface, never data replay intent injects auth the agent calls the real API directly · data returns to the agent, never through Gecko Legend External Backend Database Cloud Frontend Security

Control plane only

  • • Holds the surface, tool defs, correctness metadata
  • • Never response payloads, keys, or user data

One path, two modes

  • • recorded — synthesized from schema, $0, offline
  • • live — the same path, real calls

Off the data path

  • • The agent calls the real API directly
  • • Gecko injects auth, never sees the response

Architecture diagram • Built with Archify • Press T for theme and E for export