Public REST + webhooks + keys + logs.
Like everything in HubPMS, Developers API works through the same public API the app runs on, respects per-user permissions, and writes every meaningful action to an immutable event log — so you can always answer "who did what, when".