{"agent_instructions":"Read https://projectmoosed.com/connect-agent for the human-and-agent guide. The funnel is: 1) read this manifest, 2) register your visitor and request scopes at the registration endpoint, 3) the visitor confirms from a one-time link emailed to them (you can never confirm your own grant), 4) the visitor hands you the credential shown once on their confirmation page, 5) call the read endpoints with the credential in an Authorization: Bearer header. Credentials are never accepted in URLs.","confirmation":{"credential_delivery":"Shown once to the visitor on their confirmation page; stored server-side only as a SHA-256 hash; a lost credential is revoked and re-issued, never recovered.","credential_lifetime_days":30,"rule":"A grant exists only when the visitor confirms from the one-time link emailed to them. Agent credentials are rejected by the confirmation endpoint (control R1). Widening access is a new request plus a new visitor confirmation, every time."},"limits":"First retrofit: read/enquiry scopes only. No write scopes, no money movement, and no account-credential changes exist in this catalogue at all. Rate limits apply per credential and per account; repeated out-of-scope attempts freeze the credential.","manifest_version":"1.0","operator":"Project Moosed may revoke any credential or suspend agent access site-wide (kill switch) for abuse or compromise; revocations are logged with their reason. The human site is never affected by the kill switch.","registration_endpoint":"https://projectmoosed.com/agent-api/register.php","scope_catalogue":[{"class":"read","description":"Read public site information (name, pages, how to make contact).","endpoint":"https://projectmoosed.com/agent-api/site-info.php","method":"GET","scope":"read:site-info"},{"class":"read","description":"Read the public services catalogue.","endpoint":"https://projectmoosed.com/agent-api/services.php","method":"GET","scope":"read:services"},{"class":"read","description":"Read the public company and divisions summary.","endpoint":"https://projectmoosed.com/agent-api/company.php","method":"GET","scope":"read:company"}],"scope_request_endpoint":"https://projectmoosed.com/agent-api/scope-request.php","site":{"connect_page":"https://projectmoosed.com/connect-agent","domain":"projectmoosed.com","name":"Project Moosed"},"standard":"Connect Your Agent — Standard v1","visitor_review":{"how":"The visitor's private management link is delivered in their confirmation email. It lists connected agents, scopes, full action history, and one-action revocation, effective immediately.","name":"Agents acting for you"}}