# Shared Forest REST API > Keyless JSON API for the Shared Forest. Version 1. No authentication for REST. The MCP account tools use OAuth 2.1: https://sharedforest.com/auth.md. - [OpenAPI 3.1](https://sharedforest.com/openapi.json): full reference. - [Developer portal](https://sharedforest.com/developers.md): quickstart, pagination, idempotency, rate limits, errors, versioning. - [API catalog (RFC 9727)](https://sharedforest.com/.well-known/api-catalog) ## Endpoints - GET /api/forest: live snapshot. Optional limit, cursor and bbox for pagination. - POST /api/visit: record a visit or plant a tree. Optional Idempotency-Key header. - GET or POST /ask: NLWeb question endpoint. - GET /api/v1/pricing and /api/v1/pricing/quote?quantity=N: sponsorship prices (4.90 to 9.00 EUR per tree, VAT included). - POST /api/v1/designs, GET /api/v1/designs/{id}: design a sponsored tree from a wish. - GET /api/v1/spots, POST /api/v1/holds: find and hold spots. - POST /api/v1/orders, GET /api/v1/orders/{id}: start and read an unpaid sponsorship order. Give confirmUrl to the human buyer. - POST /api/v1/orders/{id}/confirm: human confirmation, called by the confirm page. - POST /api/v1/orders/{id}/withdraw: withdrawal function.