Agent discovery
Public API
Machine-readable discovery and careful usage notes for the public portfolio API.
Discovery
The API catalog is available at /.well-known/api-catalog, and the OpenAPI 3.1 description is available at /.well-known/openapi.json.
Contact submission
POST /api/contact stores a user-approved message in a private inbox when validation, anti-automation, rate-limit, and infrastructure checks succeed. The endpoint deliberately returns non-enumerating outcomes, so a 202 response does not always prove that a message was stored.
Agents should obtain the user's approval immediately before submission and should never include secrets or credentials.
Read-only agent access
The MCP endpoint at /mcp exposes one read-only tool for the public portfolio summary. Its discovery document is at /.well-known/mcp/server-card.json.