# Workport MCP Directory

> MCP gateway for Workstream RSS, Workdoc resume sections, Workblock cluster metrics, diagnostics, and memo timeboxes. Private directory browsing requires Agent ID; memo recording also requires memos:write.

## Authentication

- Private application and API requests require a fresh signed `X-Agent-ID-Token` for the registered Workport client ID, issued by https://auth.agentid.com.
- MCP requests additionally require `Authorization: Bearer <scoped token>`; both headers are required and existing tool scopes still apply.
- Obtain and refresh identity through the verified Agent ID sign-in helper. Send credentials only to this canonical origin and refuse redirects.
- Registered public discovery documents and /api/health remain readable without identity. An anonymous root response is the access notice, not the private directory.

## Start Here

- [API catalog](https://mcp.ktortolini.dev/.well-known/api-catalog): Fetch before making HTTP calls or discovering MCP metadata.
- [MCP server card](https://mcp.ktortolini.dev/.well-known/mcp/server-card.json): Fetch when connecting an MCP client to Workport.
- [Agent skills index](https://mcp.ktortolini.dev/.well-known/agent-skills/index.json): Fetch when selecting a supported read-only workflow.

## Browser UI

- [Local directory HTML](https://mcp.ktortolini.dev/?directory=local): Use for UI validation of the semantic table headings captions loading state and stable data-workport-agent-* row markers.
- [Main directory HTML](https://mcp.ktortolini.dev/?directory=main): Use for UI validation of configured directory roots.

## Policies

- [Robots policy](https://mcp.ktortolini.dev/robots.txt): Crawl allowances and Content-Signal directives.
- [Sitemap](https://mcp.ktortolini.dev/sitemap.xml): Canonical URL inventory.

## Operational Endpoints

- [Health API](https://mcp.ktortolini.dev/api/health): Lightweight JSON status check.
- [MCP transport](https://mcp.ktortolini.dev/api/mcp): Protected MCP endpoint for authenticated scoped tool calls.