# PlatPhormNews MCP Gateway

Version: 0.1.0
Protocol: MCP 2024-11-05 over JSON-RPC 2.0
Supported protocol versions: 2025-06-18, 2024-11-05
Preferred client protocol version: 2025-06-18
Base URL: https://mcp.platphormnews.com
Canonical endpoint: https://mcp.platphormnews.com/api/mcp

PlatPhormNews MCP Gateway is the canonical MCP gateway, micro-factory,
capability registry, MCP/API bridge, agent policy hub, and machine-readable
orchestration surface for the PlatPhormNews network.

## Endpoint

- Streamable HTTP: https://mcp.platphormnews.com/api/mcp
- Authentication: public read-only introspection; protected write/proxy/admin actions require PLATPHORM_API_KEY
- Discovery: https://mcp.platphormnews.com/.well-known/mcp.json
- Agent Policy: https://mcp.platphormnews.com/.well-known/agent-policy.json
- AI Policy: https://mcp.platphormnews.com/.well-known/ai-policy.json

## Canonical Registry Counts

- 140 tools across 16 categories
- 16 resources
- 23 prompts
- 101 public tools
- 39 protected tools
- 11 generated draft tools
- 11 generated eval manifests
- 11 generated sandbox test manifests
- 11 generated BrowserOps test manifests
- 11 integration targets
- 12 agent policy platforms
- 13 client profiles
- 142 registered sites from the network graph
- 178 graph nodes
- 227 graph edges

Tool, resource, prompt, and category counts are generated from the canonical
in-process MCP registry. Registered sites, nodes, and edges are generated from
the root network graph. Network-wide discovery also merges the base sitemap
index, bootstrap trusted sites, and configured extras for newly launched trusted
subdomains.

## Canonical Sources and Storage

- MCP registry source: in-process MCP registry from registered handlers
- Registered site source: https://platphormnews.com/api/network/graph
- Sitemap index source: https://base.platphormnews.com/sitemap-index.xml
- Health status: healthy
- Redis status: connected
- DynamoDB status: degraded (READ_ONLY)
- Storage registered sites: 0

Redis is used for live/cache state when connected. DynamoDB is currently
degraded/read-only when configured and is
not the canonical source for live MCP counts.

## Quick Start

```bash
# List all tools
curl -X POST https://mcp.platphormnews.com/api/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

# Initialize before a tool call; keep Mcp-Session-Id from the response, then send notifications/initialized
curl -i -X POST https://mcp.platphormnews.com/api/mcp \
  -H "Content-Type: application/json" \
  -H "MCP-Protocol-Version: 2025-06-18" \
  -d '{"jsonrpc":"2.0","id":"init","method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"curl","version":"1.0"}}}'
```

Protected calls add `Authorization: Bearer $PLATPHORM_API_KEY` or `X-PlatPhorm-API-Key: $PLATPHORM_API_KEY`.
Remote network tools are source-labeled federated capabilities at `/api/v1/registry/federated-tools?live=1`; they are not folded into local `tools/list` unless MCP owns a validated delegation path.

## Phase 2 Gateway and Factory

- Factory status: degraded
- Generated tools are drafts until validation, eval, sandbox, and operator publish checks pass.
- Eval, sandbox, and BrowserOps manifest counts are public-safe planning artifacts, not claimed downstream execution results.
- Demo readiness connects root network truth, MCP registry, AgentUI rendering, Spec validation, Sandbox dry-run, and Evals scoring as trace-linked dry-run handoff previews.
- Gateway status: degraded
- Public-safe read proxy policy: active_for_trusted_discovery_artifacts_and_read_only_mcp_methods
- Protected proxy policy: guarded_by_PLATPHORM_API_KEY
- Trusted target policy: *.platphormnews.com, mcp.platphormnews.com, *.ph3ar.com, ascii.platphormnews.com

## Public MCP Methods

- initialize
- ping
- tools/list
- resources/list
- resources/read
- prompts/list
- prompts/get
- tools/call for public-safe read tools

## Resources

- `platphormnews://system-prompt`: Context for AI orchestrators.
- `platphormnews://capabilities`: Unified capability registry.
- `platphormnews://health`: Real-time network-wide health status.
- `platphormnews://llms`: LLM/MCP discovery summary.

## IDE Integration

Supported client profiles:
- Claude Desktop
- Cursor
- Windsurf
- VS Code MCP clients
- Codex-compatible workflows
- OpenAI agent/client usage
- Anthropic/Claude usage
- Browser MCP clients
- Generic Streamable HTTP clients
- curl
- Node/TypeScript
- Python
- CI/GitHub Actions

Cursor / Claude Desktop example:

```json
{"mcpServers":{"platphormnews":{"url":"https://mcp.platphormnews.com/api/mcp"}}}
```

For protected actions, store PLATPHORM_API_KEY in the client environment or
secret store. Do not put the key in browser storage, llms files, traces, or
public config artifacts.

## platphormctl Examples

```bash
platphormctl site inspect mcp --best-effort
platphormctl mcp validate mcp --best-effort
platphormctl site llms mcp --best-effort
platphormctl site sitemap mcp --best-effort
platphormctl site policies mcp --best-effort
platphormctl harness run mcp-factory --dry-run
platphormctl --include mcp.platphormnews.com harness run developer-validation --dry-run
```

## Machine Surfaces

- Capability graph: https://mcp.platphormnews.com/api/v1/discovery/graph
- Factory tools: https://mcp.platphormnews.com/api/v1/factory/tools
- Gateway status: https://mcp.platphormnews.com/api/v1/gateway/status
- Integrations: https://mcp.platphormnews.com/api/v1/integrations/status
- Demo readiness: https://mcp.platphormnews.com/api/v1/demo/suite
- Shared demo readiness: https://mcp.platphormnews.com/api/demo/readiness
- Registry counts: https://mcp.platphormnews.com/api/v1/registry/counts
- Registry drift: https://mcp.platphormnews.com/api/v1/registry/drift
- Federated tools: https://mcp.platphormnews.com/api/v1/registry/federated-tools?live=1
- Agent policy: https://mcp.platphormnews.com/api/v1/agent-policy
- Web Status manifest: https://mcp.platphormnews.com/.well-known/web.json
- Web Status: https://mcp.platphormnews.com/api/web/status
- Web Status scorecard: https://mcp.platphormnews.com/api/web/scorecard
- Web Status fingerprints: https://mcp.platphormnews.com/api/web/fingerprints
- Legacy Web4 aliases: https://mcp.platphormnews.com/.well-known/web4.json and https://mcp.platphormnews.com/api/web4/status
- Provenance: https://mcp.platphormnews.com/.well-known/provenance.json
- AsyncAPI: https://mcp.platphormnews.com/asyncapi.yaml

## Data Safety

- Public-safe read-only discovery is enabled by default.
- Mutating, proxy, sync, test, reporting, and admin actions require PLATPHORM_API_KEY.
- x-vercel-ja4-digest may be captured for trust scoring and observability.
- Raw x-vercel-ja4-digest is never exposed in public artifacts.
- Trace context is accepted and propagated for platform operations.

## Links

- Monitor: https://monitor.platphormnews.com
- Dashboard: https://mcp.platphormnews.com/mcp
- OpenAPI: https://mcp.platphormnews.com/openapi.yaml
- Full Spec: https://mcp.platphormnews.com/llms-full.txt
- Agent Index: https://mcp.platphormnews.com/llms-index.json
- Agents JSON: https://mcp.platphormnews.com/.well-known/agents.json
- Agent Policy: https://mcp.platphormnews.com/.well-known/agent-policy.json
- AI Policy: https://mcp.platphormnews.com/.well-known/ai-policy.json
- Trust Policy: https://mcp.platphormnews.com/.well-known/trust.json