AI agents (MCP and A2A)
External agents, provisioning and corporate sign-in.
Each door requires the credential stated beside it. MCP lets an external agent (Claude, ChatGPT) query the account with a key's permissions; A2A is the agent-to-agent channel; SCIM provisions users from your directory; SAML and OAuth are corporate login and connected apps.
| Name | URL | Key scope |
|---|---|---|
| API pública | /api/v1/* | System with a key |
| Contrato da API (OpenAPI) | /api/v1/openapi.json | Anyone |
| api-sdk | /api/v1/sdk/* | Anyone |
| External agents channel (MCP) | /mcp/* | System with a key |
| mcp-manifesto | /.well-known/mcp.json | Anyone |
| Agent-to-agent channel (A2A) | /a2a | System with a key |
| a2a-card | /.well-known/agent-card.json | Anyone |
| SCIM provisioning | /api/v1/scim/v2/* | System with a key |
| SSO por SAML | /saml/ | Only the app itself |
| Login social | /oauth/ | Only the app itself |
| Team channel (Slack/Teams → ticket) | /webhooks/canal | Only the app itself |