# YouSpot for developers and agents

> What YouSpot exposes to code: an MCP server, OAuth 2.1, public profile endpoints, and the discovery files that describe them.

YouSpot is a personal CRM for AI-native professionals. It builds a second brain from the people, companies, notes and files you already deal with, syncing Gmail, Google Calendar, HubSpot, X and LinkedIn into one graph you can ask in plain English. One plan, $10 a month, no seats to count.

## What you can call

- **MCP server** at `https://youspot.com/mcp`: streamable HTTP transport, OAuth 2.1 with PKCE S256 and dynamic client registration. This is the primary way an agent reads and writes a member's CRM.
- **Public profile endpoints** at `https://youspot.com/api/human/<username>` (also `.json` and `.md`) and `https://youspot.com/api/network/members`: no auth, public data only.
- **Discovery files** listed below, so a crawler or an agent can find all of the above without being told.

## Discovery files

| Path | What it is |
| --- | --- |
| `/llms.txt` | this site, for language models |
| `/llms-full.txt` | the long-form version |
| `/sitemap.xml` | every public page with a last-modified date |
| `/index.md` | the home page as markdown |
| `/agents.md` | what an agent can do here, in one page |
| `/mcp/v1` | streamable HTTP; initialize and tools/list need no credential |
| `/.well-known/mcp/server-card.json` | the endpoint, transport and every tool |
| `/auth.md` | how an agent gets a credential |
| `/openapi.json` | every HTTP endpoint that exists |
| `/.well-known/api-catalog` | RFC 9727 |
| `/v1` | every endpoint, and what each one costs in credentials |
| `/mcp/docs` | the public pages over MCP, no credential at all |
| `/ask` | a question in plain words, answered from these pages |
| `/.well-known/agent-card.json` | JSON-RPC at /a2a |
| `/.well-known/oauth-authorization-server` | RFC 8414 |
| `/.well-known/oauth-protected-resource` | RFC 9728 |
| `/.well-known/agent-skills/index.json` | skills an agent can load |
| `/.well-known/ard.json` | agent resource discovery |
| `/.well-known/security.txt` | how to report a vulnerability |

## Reading pages as markdown

Every public page answers a markdown twin. Add `.md` to the path, or send `Accept: text/markdown` and get the same body back at the original URL.

```bash
curl https://youspot.com/pricing.md
curl -H "Accept: text/markdown" https://youspot.com/pricing
```

## Where to go next

- [Authentication](https://youspot.com/docs/authentication): the OAuth 2.1 flow, and the API token a member can mint by hand.
- [MCP](https://youspot.com/docs/mcp): connecting Claude, ChatGPT, Cursor and Claude Code, and what the tools do.
- [API](https://youspot.com/docs/api): the HTTP surface that needs no MCP client.
- [Security](https://youspot.com/docs/security): how to report a vulnerability.