# Trading Console

Trading Console is the public website for PoisAr's AI-ranked market intelligence console.

## Agent Use

- Use the public discovery links for product overview, API metadata, MCP discovery, and Agent Skills.
- Treat authenticated app routes under /app/* as private operator workspace routes.
- Do not infer account, broker, market-feed, or authenticated data from public documents.
- Public tools are read-only and limited to overview and discovery metadata.

## Public Discovery

- [Agent access guide](https://poisar.com/agents)
- [Robots rules](https://poisar.com/robots.txt)
- [Sitemap](https://poisar.com/sitemap.xml)
- [Markdown guide for agents](https://poisar.com/llms.txt)
- [API catalog](https://poisar.com/.well-known/api-catalog)
- [OpenAPI document](https://poisar.com/openapi.json)
- [OAuth authorization server metadata](https://poisar.com/.well-known/oauth-authorization-server)
- [OAuth protected resource metadata](https://poisar.com/.well-known/oauth-protected-resource)
- [MCP server card](https://poisar.com/.well-known/mcp/server-card.json)
- [Agent Skills index](https://poisar.com/.well-known/agent-skills/index.json)
- [Web Bot Auth directory](https://poisar.com/.well-known/http-message-signatures-directory)

## Boundaries

- Public routes describe the product, readiness metadata, and read-only discovery endpoints.
- Authenticated product routes stay under /app/* and require the existing session cookie.
- Agent-facing public tools do not expose account data, broker state, market feeds, or authenticated app data.
- Public agent tools are limited to site overview, discovery links, and published boundary documentation.