Docs for developers and agents

YouSpot runs an MCP server with OAuth 2.1, answers every public page as markdown, and publishes the discovery files an agent needs to find both.

YouSpot for developers and agents

What YouSpot exposes to code: an MCP server, OAuth 2.1, public profile endpoints, and the discovery files that describe them.

Authentication

YouSpot is an OAuth 2.1 authorization server for agents: dynamic client registration, PKCE S256, refresh-token rotation. Members can also mint a long-lived API token by hand.

MCP server

Connect Claude, ChatGPT, Cursor or Claude Code to https://youspot.com/mcp/v1 and let an agent read and write your own CRM.

HTTP API

The endpoints YouSpot answers over plain HTTP: public profile data with no auth, and the MCP tool surface with a bearer token.

Security and vulnerability disclosure

How to report a security issue to YouSpot, Inc., what is in scope, and what we commit to in return.

Machine endpoints

/llms.txtthis site, for language models
/llms-full.txtthe long-form version
/sitemap.xmlevery public page with a last-modified date
/index.mdthe home page as markdown
/agents.mdwhat an agent can do here, in one page
/mcp/v1streamable HTTP; initialize and tools/list need no credential
/.well-known/mcp/server-card.jsonthe endpoint, transport and every tool
/auth.mdhow an agent gets a credential
/agent/identitywhat identity you can hold here, and who you are holding
/openapi.jsonevery HTTP endpoint that exists
/plugin.jsonboth MCP servers and the skills, in one bundle
/.well-known/api-catalogRFC 9727
/v1every endpoint, and what each one costs in credentials
/mcp/docsthe public pages over MCP, no credential at all
/mcp/sandboxthe read tools over a demo account, no credential and no signup
/aska question in plain words, answered from these pages
/.well-known/agent-card.jsonJSON-RPC at /a2a
/.well-known/oauth-authorization-serverRFC 8414
/.well-known/oauth-protected-resourceRFC 9728
/.well-known/agent-skills/index.jsonskills an agent can load
/.well-known/ard.jsonagent resource discovery
/.well-known/security.txthow to report a vulnerability
/.well-known/http-message-signatures-directorythe key YouSpot agents sign their own requests with