Skip to main content
Returns the full WebMCP-compliant JSON manifest for a website. This is the data AI agents read to understand your site’s available actions.

Request

Or via the canonical WebMCP path (recommended — works via a rewrite):

Response

Notes

  • Only enabled actions are included. Disabled actions are omitted entirely.
  • The /.well-known/webmcp.json path is handled via a Next.js rewrite — no separate file is needed on your server.
  • Response includes X-WebMCP: enabled and X-OpenHermit: 1.0 headers.
  • This endpoint is public — no authentication required (the API key is in the query string, identifying which site to return).

CORS

Accepts cross-origin requests (Access-Control-Allow-Origin: *).