Docs / YouSpot for developers and agents

YouSpot for developers and agents

What YouSpot exposes to code: an MCP server, OAuth 2.1, public profile endpoints, and the discovery files that describe them.

YouSpot is a personal CRM for AI-native professionals. It builds a second brain from the people, companies, notes and files you already deal with, syncing Gmail, Google Calendar, HubSpot, X and LinkedIn into one graph you can ask in plain English. One plan, $10 a month, no seats to count.

What you can call

  • MCP server at https://youspot.com/mcp: streamable HTTP transport, OAuth 2.1 with PKCE S256 and dynamic client registration. This is the primary way an agent reads and writes a member's CRM.
  • Public profile endpoints at https://youspot.com/api/human/<username> (also .json and .md) and https://youspot.com/api/network/members: no auth, public data only.
  • Discovery files listed below, so a crawler or an agent can find all of the above without being told.

Discovery files

PathWhat it is
/llms.txtthis site, for language models
/llms-full.txtthe long-form version
/sitemap.xmlevery public page with a last-modified date
/index.mdthe home page as markdown
/agents.mdwhat an agent can do here, in one page
/mcp/v1streamable HTTP; initialize and tools/list need no credential
/.well-known/mcp/server-card.jsonthe endpoint, transport and every tool
/auth.mdhow an agent gets a credential
/agent/identitywhat identity you can hold here, and who you are holding
/openapi.jsonevery HTTP endpoint that exists
/plugin.jsonboth MCP servers and the skills, in one bundle
/.well-known/api-catalogRFC 9727
/v1every endpoint, and what each one costs in credentials
/mcp/docsthe public pages over MCP, no credential at all
/mcp/sandboxthe read tools over a demo account, no credential and no signup
/aska question in plain words, answered from these pages
/.well-known/agent-card.jsonJSON-RPC at /a2a
/.well-known/oauth-authorization-serverRFC 8414
/.well-known/oauth-protected-resourceRFC 9728
/.well-known/agent-skills/index.jsonskills an agent can load
/.well-known/ard.jsonagent resource discovery
/.well-known/security.txthow to report a vulnerability
/.well-known/http-message-signatures-directorythe key YouSpot agents sign their own requests with

The CLI, the SDKs and the source

The official client is published under the YouSpot name in both ecosystems. Everything except calling a tool works with no credential, so either one is useful before anybody signs in.

npx youspot ask "how do I connect an MCP client"
npx youspot tools

pip install youspot
WhereWhat
npm: youspotthe CLI and the JavaScript SDK. npx youspot ask "..." needs no credential.
PyPI: youspotthe Python client. pip install youspot.
GitHub: OnStartups/youspot-agent-toolssource, the agent skills, AGENTS.md, .cursorrules and the Agent Plugins manifest.

The repository carries AGENTS.md and .cursorrules for coding agents, an Agent Plugins manifest at plugin.json, and the three agent skills. It is the same source the packages are built from.

Reading pages as markdown

Every public page answers a markdown twin. Add .md to the path, or send Accept: text/markdown and get the same body back at the original URL.

curl https://youspot.com/pricing.md
curl -H "Accept: text/markdown" https://youspot.com/pricing

Where to go next

  • Authentication: the OAuth 2.1 flow, and the API token a member can mint by hand.
  • MCP: connecting Claude, ChatGPT, Cursor and Claude Code, and what the tools do.
  • API: the HTTP surface that needs no MCP client.
  • Security: how to report a vulnerability.