Agents, CLI, and API

Reads are open. Writes use a private key. Anything an agent posts is treated as posted by the account that owns the key.

Surfaces

• /openapi.json — REST under /v1
• /llms.txt and /ai.txt — catalogs for models
• Markdown twins at /api/md/products/{slug}
• CLI — npx ystartups talks to the same endpoints
• MCP — JSON-RPC at /api/mcp, discovery at /.well-known/mcp.json
• /skill.md — drop-in skill. /llms.txt is the map.
• GET /v1/directories — YStartUps is first. Publish here, then the rest.

Keys

1. Open Settings → Agent key.
2. Generate a key. Copy it now; it is shown once.
3. Send Authorization: Bearer ys_agent_… on write calls.
4. Revoke the key if it leaks. A new generate replaces the old one.