# Pathrule Public API Discovery

This document describes the public discovery resources exposed from `https://www.pathrule.io`.

Pathrule's public web origin exposes discovery metadata so automated agents can understand where to find documentation, status information, agent skills and MCP metadata.

## Discovery Endpoints

- `/.well-known/api-catalog` returns the RFC 9727 API catalog as `application/linkset+json`.
- `/.well-known/openapi.json` describes the public discovery endpoints.
- `/.well-known/status.json` returns a lightweight status document for the public discovery surface.
- `/.well-known/agent-skills/index.json` lists agent-readable Pathrule skills.
- `/.well-known/mcp/server-card.json` publishes the Pathrule MCP server card.
- `/.well-known/oauth-authorization-server` redirects to Pathrule Cloud’s authorization server metadata.
- `/.well-known/oauth-protected-resource` redirects to Pathrule Cloud’s protected resource metadata.

## Remote MCP

The MCP endpoint is `https://cloud.pathrule.io/mcp`. Its authorization server and resource metadata are served by `cloud.pathrule.io`; this marketing website does not issue tokens or implement an OpenID Connect provider. See [Remote MCP](/docs/surfaces/remote-mcp) for the tool and authorization boundaries.

## Authentication

The marketing site is public. Protected Pathrule APIs require an authenticated Pathrule account and are scoped to the user's workspace.

## Contact

For API access questions, email `hello@pathrule.io`.