poisar

Public agent access

Agent-ready discovery, without private workspace access

Poisar publishes machine-readable metadata for agents and crawlers while keeping operator workflows, account state, broker state, and authenticated market surfaces inside the protected app.

Read llms.txtView MCP card

Readiness Posture

Public Metadata, Narrow Capabilities, Clear Boundaries

Discoverable

Canonical documents expose robots policy, sitemap, markdown guidance, API catalog, OpenAPI, and MCP discovery.

Read-only

Public tools are marked read-only and return only overview, links, and boundary metadata.

Bounded

Operator workspace routes stay behind authenticated sessions under /app/*.

Discovery Links

Canonical Documents for Agents

Agent access

Human-readable agent guide with the safe public boundary.

llms.txt

Markdown guide for crawlers and agent runtimes.

API catalog

Linkset catalog for API, OAuth, MCP, and skill metadata.

OpenAPI

OpenAPI document for public discovery and authenticated read-only customer intelligence.

MCP server card

MCP server card for read-only public tools.

MCP tools

Read-only Public Tool Surface

get_public_overview

Return the public overview, discovery links, and protected-route boundaries for Poisar.

get_agent_readiness_links

Return canonical public agent-readiness discovery links for Poisar.

JSON-RPC
POST /api/mcp
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/list"
}

Connect a Client

Add the Public Server

Claude, ChatGPT, Cursor, VS Code, Claude Code, and Codex can call https://poisar.com/api/mcp. The server speaks streamable HTTP and returns discovery metadata only.

Claude

Add a custom connector with this URL.

https://poisar.com/api/mcp
ChatGPT

Add a custom connector with this URL.

https://poisar.com/api/mcp
Claude Code

Run in a terminal.

claude mcp add --transport http poisar https://poisar.com/api/mcp
Codex

Run in a terminal.

codex mcp add poisar --url https://poisar.com/api/mcp
Cursor

Save as .cursor/mcp.json.

{
  "mcpServers": {
    "poisar": {
      "url": "https://poisar.com/api/mcp"
    }
  }
}
VS Code

Save as .vscode/mcp.json.

{
  "servers": {
    "poisar": {
      "type": "http",
      "url": "https://poisar.com/api/mcp"
    }
  }
}

Protected Boundary

What Public Agents Should Not Assume

/app/* is the private operator workspace.
/api/* requires the authentication documented in /openapi.json unless an operation is explicitly public.
Public MCP tools cannot submit trades, approve workflow actions, or read account data.
Missing authenticated access should be treated as unavailable, not inferred.

Machine-readable first

Agents should start with the API catalog and llms.txt, then use the MCP server card only for read-only public overview and discovery metadata.

Open catalog

Full index

Published Discovery Endpoints