The memory your agents are missing.

// In your agent prompt or webhook handler:
const target = "marcus@stripe.com";
const userId = req.user.id; // from auth session

// 1. Find the contact ID for the target email
const contactRes = await fetch(
  `https://kimono.polsia.app/api/contacts?search=${encodeURIComponent(target)}`,
  { headers: { "Authorization": `Bearer ${req.session.token}` }}
);
const { contacts } = await contactRes.json();
const targetContact = contacts[0];
if (!targetContact) return { message: "No contact found" };

// 2. Get your owner contact ID
const ownerRes = await fetch(
  `https://kimono.polsia.app/api/contacts?search=${encodeURIComponent(req.user.email)}`,
  { headers: { "Authorization": `Bearer ${req.session.token}` }}
);
const { contacts: [ownerContact] } = await ownerRes.json();

// 3. Find the warm path
const pathRes = await fetch(
  `https://kimono.polsia.app/api/warmpath?from=${ownerContact.id}&to=${targetContact.id}`,
  { headers: { "Authorization": `Bearer ${req.session.token}` }}
);
const path = await pathRes.json();

// 4. Return path to agent for intro drafting
if (path.found) {
  const middlePerson = path.path[1];
  return {
    warmPath: path.path,
    introSuggestion: `Ask ${middlePerson.contact.name} to introduce you to ${targetContact.name}`,
    context: middlePerson.edgeContext
  };
}

// When agent receives: "Prep me for my call with Marcus at Stripe"

// 1. Get Marcus's contact + connections
const detailRes = await fetch(
  `https://kimono.polsia.app/api/contacts/${targetId}`,
  { headers: { "Authorization": `Bearer ${token}` }}
);
const { contact, connections } = await detailRes.json();

// connections[0] tells you the intro context — include in prep
return {
  name: contact.name,
  company: contact.company,
  role: contact.role,
  introContext: connections[0]?.context, // e.g. "ex-colleagues at Stripe"
  howYouKnowThem: connections[0]?.connected_name, // e.g. "Jamie Chen"
  talkingPoints: ["Ask about Tempo AI's recent round", "Reference mutual connection Jamie Chen"]
};

# Sign in — returns a JWT
curl -X POST https://kimono.polsia.app/api/auth/login -H "Content-Type: application/json" -d '{"email":"alex@meridian.vc","password":"..."}'

# Response
{
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "user": { "id": 1, "email": "alex@meridian.vc", "name": "Alex Rivera" }
}

# Pass as Bearer token on every request
curl -H "Authorization: Bearer $KIMONO_TOKEN" https://kimono.polsia.app/api/warmpath?from=1&to=42

# Node.js example
const res = await fetch('/api/contacts', {
  headers: { "Authorization": `Bearer ${req.session.token}` }
});

# Agents get least-privilege access
# - Only the authenticated user's graph is visible
# - No cross-user data access (even with token theft)
# - No PII exposed unless explicitly shared via Kimono ID

# Your token lives in sessionStorage / HTTP-only cookie
# Never embed in client-side JS or pass to third parties

# Create account
curl -X POST https://kimono.polsia.app/api/auth/register -H "Content-Type: application/json" -d '{"name":"Alex Rivera","email":"alex@meridian.vc","password":"..."}'