Dumpling

Let an assistant add to-dos

With a key the person gives you, your assistant can add to-dos to their Dumpling app and check that each one arrived. It can't read their notes, recordings or other to-dos, see locked folders, or change or delete anything.

Getting a key

  1. The person opens Dumpling → Settings → Integrations, taps Connect next to your assistant (Muse or Instinct today), and confirms with Face ID.
  2. Dumpling shows the key once (it starts dpk_). They paste it into your app's key field. Never ask for it in a chat or an email.
  3. Call GET /v1/connection and show the fingerprint: it matches the connection code they see in Dumpling.

Keys last 90 days and the person can revoke one at any time. A key is a bearer credential: keep it like a password.

REST

Base URL https://api.mydumpling.app. Send the key as Authorization: Bearer dpk_… (or X-API-Key: dpk_…). Full contract: OpenAPI 3.1.

POST /v1/tasks
Authorization: Bearer dpk_…
Idempotency-Key: 8f1c…
Content-Type: application/json

{"external_id": "inst-7f3a2c", "kind": "follow_up",
 "title": "Follow up on the proposal",
 "due": {"type": "date", "date": "2026-10-20", "time_zone": "America/New_York"}}

202 Accepted
{"id": "tsk_…", "delivery_state": "queued", …}
  • Retries are safe. The same Idempotency-Key and body returns the original task. A new key for an external_id you already sent returns that task if the content matches; a changed request is a 409. After a timeout, look up GET /v1/tasks?external_id= before sending again.
  • Delivery. GET /v1/tasks/{id} shows delivery_state: queued until the person's iPhone picks it up and confirms (saved). Phones fetch when Dumpling opens, so this isn't for time-critical reminders. Not picked up in 7 days: expired. Revoked first: cancelled.
  • Dates. due is null, a calendar date, or an exact time whose offset must match its IANA zone at that instant. Only send one the person gave you; never invent a date or a reminder time.
  • Fields. title 1–300 characters, notes up to 4,000, plain text. Unknown fields are refused.
  • Limits. 30 new tasks a minute and 500 a day per connection; 16 KB per request. Over a limit: 429 with Retry-After.
  • Errors are {"error": {"code", "message", "request_id"}}.

MCP

The same actions as MCP tools at https://api.mydumpling.app/v1/mcp: add_task (requires external_id, which makes retries safe), get_task and find_task. Stateless Streamable HTTP with JSON responses; it accepts the 2026-07-28 protocol and initialize-based clients. Authenticate with the same key, as a Bearer token or an X-API-Key header. For a Meta Muse custom connector, give Muse this URL and the key through its secure credential prompt.

What we keep

A task's text stays on our server until the person's iPhone saves it, then 7 more days so you can read it back; after that only its id and state remain, for 90 days. Task text is never sent to an AI. See the privacy policy.