{
  "schema_version": "1.0",
  "name": "agent-middleware-api",
  "description": "This marketing host points machines to the Agent Middleware API trust plane for scoped authority, metered MCP calls, signed receipts, and replay-safe accounting.",
  "primary_audience": "autonomous_agents",
  "buyer_audience": [
    "platform_engineering",
    "ai_infrastructure",
    "security_teams_operating_internal_mcp_tools"
  ],
  "product_wedge": "governed_mcp_trust_plane",
  "thesis": "Before an autonomous agent acts, it needs bounded authority and portable proof.",
  "product_loop": [
    "discover",
    "authenticate",
    "authorize",
    "invoke",
    "meter",
    "receipt",
    "audit",
    "govern"
  ],
  "canonical_api": "https://api.thisisatest.tech",
  "human_site": "https://www.thisisatest.tech/",
  "github": "https://github.com/PetrefiedThunder/agent-middleware-api",
  "github_access": "private",
  "discovery": {
    "agent_manifest": "https://api.thisisatest.tech/.well-known/agent.json",
    "llm_txt": "https://api.thisisatest.tech/llm.txt",
    "llms_txt": "https://api.thisisatest.tech/llms.txt",
    "mcp_tools": "https://api.thisisatest.tech/mcp/tools.json",
    "openapi": "https://api.thisisatest.tech/openapi.json",
    "capability_index": "https://api.thisisatest.tech/v1/discover",
    "dependency_truth": "https://api.thisisatest.tech/health/dependencies"
  },
  "bootstrap_sequence": [
    "https://api.thisisatest.tech/.well-known/agent.json",
    "https://api.thisisatest.tech/llms.txt",
    "https://api.thisisatest.tech/mcp/tools.json",
    "https://api.thisisatest.tech/openapi.json"
  ],
  "simulation_and_dependency_truth": "https://api.thisisatest.tech/health/dependencies",
  "try_it": {
    "mode": "local_self_hosted",
    "repository": "https://github.com/PetrefiedThunder/agent-middleware-api",
    "repository_access": "private",
    "command": "make prove-trust-plane",
    "live_access": "operator_issued",
    "requires_live_credentials": false,
    "proves": [
      "scoped_permit",
      "metered_mcp_invoke",
      "signed_receipt",
      "replay_without_second_charge",
      "out_of_scope_denial",
      "offline_receipt_verification"
    ],
    "note": "Runs the real FastAPI trust path against a throwaway local SQLite database. This is a reproducible proof, not a production or settlement claim. The source repository is private during the design-partner phase; request access from the operator listed on the human site before cloning."
  },
  "authentication": {
    "type": "api_key",
    "header": "X-API-Key",
    "note": "No public self-serve key mint on this marketing host. Operator-issued keys required."
  },
  "note": "This file is a pointer only. Do not treat this marketing origin as the API base URL."
}