fix(site): api.mukoko.com is an unbuilt gateway, not a legacy host; name the real WorkOS project

[bryanfawcett]

Follow-up to #62, which corrected identity.nyuchi.com → accounts.mukoko.com and deliberately left these two adjacent errors for a separate PR because they are different claims about different things.

Fix 1 — api.mukoko.com is not a "legacy host"

site/src/content/docs/api/overview.mdx and site/src/content/docs/api/security.mdx described it as a "Legacy host" / "Legacy production host", implying it once served traffic and now redirects or is deprecated.

Verified:

$ getent hosts api.mukoko.com          → (no output; exit 2 — NO DNS RECORD)
$ curl -s -o /dev/null -w '%{http_code}' https://api.mukoko.com/health   → 000
$ curl -s https://api.nyuchi.com/health
{"status":"healthy","timestamp":"2026-08-12T11:28:35...","environment":"production","ubuntu":"I am because we are","version":"4.1.0"}

api.nyuchi.com is the gateway serving traffic today (FastAPI on Fly, nyuchi/api-gateway). api.mukoko.com is a separate Mukoko gateway still being built — never served traffic, does not resolve, does not redirect, and is not WorkOS. Calling it "legacy" states the opposite of the truth.

Both rows are corrected, not deleted. The name is real — it is in the gateway's own DEFAULT_TRUSTED_HOSTS (gateway/lib/security.py), allow-listed ahead of the host existing — so a reader who has heard it needs somewhere to learn what it is. Deleting the rows would leave them with nothing. Each page now carries a short "do not reword this back" note, because "future gateway that hasn't shipped" is exactly the kind of nuance a later editing pass flattens into "legacy" again.

Fix 2 — a WorkOS project that does not exist

deployment/agentgateway.mdx named a "Nyuchi Identity" WorkOS project. Checked via the WorkOS admin API: the account (team Mukoko Account) has exactly one project, Mukoko Account (project_01KQBBSK9062YGVJB6JWW3BMN8), with two environments — Staging (sandbox) and Production. The Connect app's environment (Production) was already correct; only the project name was wrong.

Fix 3 — sweep, no further changes needed

Mention	Verdict
accounts.mukoko.com (identity/overview ×4, index.mdx, README, agentgateway)	Left alone — correct. /.well-known/openid-configuration self-identifies as "issuer":"https://accounts.mukoko.com" with /oauth2/authorize etc.
auth.mukoko.com (identity/overview, agentgateway)	Left alone — correct. Described as the auth API and explicitly not an issuer; /.well-known/oauth-authorization-server returns 404, confirming the dead-end #62 warns about.
api.nyuchi.com (~30 curl examples across api/*, AUTH.md, llms.txt)	Left alone — correct. The host that answers 200.
api.mukoko.com (api/overview, api/security)	Changed — see Fix 1.
nyuchi.dev — tester.fundi.nyuchi.dev (tools/index.mdx)	Left alone. Explicitly labelled internal-only (private: true, never on npm) — consistent with "nyuchi.dev hosts internal tools only". Not a consumer surface. Does not resolve today (000), reported below rather than guessed at.
Consumer MCP surfaces	Left alone — all on product domains, none on nyuchi.dev. kweli.mukoko.com/mcp → 200, docs.nyuchi.com/mcp → 200, events.mukoko.com/mcp → 401 (auth gate), mcp.mzizi.dev/mcp → 401 (documented as the Connect OAuth gate working).
"Nyuchi Identity" project name	Changed — see Fix 2.

Found but not fixed

• tester.fundi.nyuchi.dev has no DNS record (getent empty, curl → 000). It is documented as an internal-only Cloudflare Worker, so I cannot tell whether that is a dead host (the identity.nyuchi.com class of bug) or simply an access-gated/unrouted internal deployment, and I do not know the correct URL. Flagging, not guessing.
• api/security.mdx's trusted-hosts table omits 127.0.0.1, which is in the real DEFAULT_TRUSTED_HOSTS tuple alongside localhost and testserver. Verified but left out to keep this PR to the one class of error it is about.

Gates

• pnpm install — Done in 1.6s
• pnpm build — [build] 58 page(s) built in 5.12s / [build] Complete!
• pnpm -r --if-present run test — 4 packages, 35 tests passed (nyuchi-docs-search 12, shamwari-docs-ai 9, nyuchi-docs-mcp-worker 9, nyuchi-docs-mcp 5)
• pnpm skills:validate — ✓ skills valid — 1 public at v0.1.0 (using-nyuchi-docs)

Docs content only — no worker configs touched (#62 already fixed those).

🤖 Generated with Claude Code

https://claude.ai/code/session_01HFaeL83iEL5gqQXhHweH6u

---

Generated by Claude Code

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	nyuchi-docs	74553a5	Commit Preview URL Branch Preview URL	Aug 12 2026, 11:32 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	nyuchi-docs-mcp	74553a5	Commit Preview URL Branch Preview URL	Aug 12 2026, 11:32 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	shamwari-docs-ai	74553a5	Commit Preview URL Branch Preview URL	Aug 12 2026, 11:32 AM