YouSpot docs for developers and agents

YouSpot runs an MCP server with OAuth 2.1, answers every public page as markdown, and publishes the discovery files an agent needs to find both.

YouSpot for developers and agents

What YouSpot exposes to code: an MCP server, OAuth 2.1, public profile endpoints, and the discovery files that describe them.

YouSpot API authentication

YouSpot is an OAuth 2.1 authorization server for agents: dynamic client registration, PKCE S256, refresh-token rotation. Members can also mint a long-lived API token by hand.

YouSpot MCP server

Connect Claude, ChatGPT, Cursor or Claude Code to https://youspot.com/mcp/v1 and let an agent read and write your own CRM.

YouSpot HTTP API

The endpoints YouSpot answers over plain HTTP: public profile data with no auth, and the MCP tool surface with a bearer token.

YouSpot API versioning, deprecation and rate limits

How the YouSpot API is versioned, what notice you get before anything is removed, the RateLimit headers every limited endpoint answers with, and how Idempotency-Key makes a retry safe.

Paying for YouSpot as an agent

What YouSpot sells, who can buy it, and the commerce protocols an agent can negotiate against: a UCP discovery profile at /.well-known/ucp and the ACP checkout surface.

YouSpot security and vulnerability disclosure

How to report a security issue to YouSpot, Inc., what is in scope, and what we commit to in return.

Install it

MCP registry: com.youspot/youspotthe official Model Context Protocol registry entry, under a domain-verified namespace.
mcp.so: YouSpot MCPthe directory listing, with the live tool list fetched from this domain.
Smithery: youspot/youspot-mcpthe Smithery listing of the product server, OAuth 2.1, connectable from any Smithery client.
npm: youspotthe CLI and the JavaScript SDK. `npx youspot ask "..."` needs no credential.
npm: @youspot/mcpthe MCP server for clients that only speak stdio. `npx @youspot/mcp` bridges to /mcp/v1.
PyPI: youspotthe Python client. `pip install youspot`.
Go: github.com/OnStartups/youspot-gothe Go client, standard library only. `go get github.com/OnStartups/youspot-go`.
GitHub: OnStartups/youspot-agent-toolssource, the agent skills, AGENTS.md, .cursorrules and the Agent Plugins manifest.

Machine endpoints

/llms.txtthis site, for language models
/llms-full.txtthe long-form version
/sitemap.xmlevery public page with a last-modified date
/index.mdthe home page as markdown
/agents.mdwhat an agent can do here, in one page
/mcp/v1streamable HTTP; initialize and tools/list need no credential
/.well-known/mcp/server-card.jsonthe endpoint, transport and every tool
/.well-known/mcp.jsonevery MCP server on this domain, each with its own card
/auth.mdhow an agent gets a credential
/agent/identitywhat identity you can hold here, and who you are holding
/openapi.jsonevery HTTP endpoint that exists
/plugin.jsonboth MCP servers and the skills, in one bundle
/.well-known/ai-plugin.jsonthe OpenAI manifest, naming the OpenAPI spec, the OAuth endpoints and the logo
/.well-known/api-catalogRFC 9727
/v1every endpoint, and what each one costs in credentials
/mcp/docsthe public pages over MCP, no credential at all
/mcp/sandboxthe read tools over a demo account, no credential and no signup
/sandboxthe sandbox described: what is mounted under /sandbox, and whether the demo account is seeded
/aska question in plain words, answered from these pages
/.well-known/agent-card.jsonJSON-RPC at /a2a
/.well-known/oauth-authorization-serverRFC 8414
/.well-known/oauth-protected-resourceRFC 9728
/.well-known/agent-skills/index.jsonskills an agent can load
/.well-known/ard.jsonagent resource discovery
/.well-known/ucpwhat an agent can transact with here, and what it cannot
/.well-known/security.txthow to report a vulnerability
/.well-known/http-message-signatures-directorythe key YouSpot agents sign their own requests with