{"product":"WhoCites","transport":"http-json-rpc","protocolVersion":"2025-06-18","endpoint":"/api/mcp","openApi":"/api/openapi.yaml","llms":"/llms.txt","setupGuide":"/agents/setup","legal":{"version":"2026-05-13","termsUrl":"https://whocites.com/terms","privacyUrl":"https://whocites.com/privacy","refundUrl":"https://whocites.com/refunds","purchaseTerms":"One-time $49 paid scan. No subscription or renewal. Scan starts after Stripe confirms payment and includes one post-fix re-scan.","notice":"By clicking Buy scan, continuing to Stripe Checkout, clicking Pay, or continuing to use WhoCites API, headless, or MCP access, you agree to the WhoCites Terms of Service, Privacy Policy, and Refund Policy."},"builderGuides":["/agents/replit","/agents/lovable","/agents/bolt","/agents/v0"],"repairLoop":"Create paid checkout, wait for Stripe-backed scan completion, read the owned report, pull builder-ready fixes, publish changes, then re-scan to prove movement.","proof":{"productionPaidProof":{"completedAt":"2026-05-13","engines":7,"responses":56,"fixes":5},"paymentBoundary":"No seven-engine scan-provider calls happen before Stripe payment succeeds.","privacyBoundary":"Owned report and fix JSON omit customer contact data, Stripe IDs, raw AI excerpts, and citation URLs."},"tools":[{"name":"whocites_start_scan","title":"Start WhoCites Scan","description":"Create a Stripe Checkout URL for a paid WhoCites AI visibility scan. The scan starts only after payment succeeds. Calling this tool and opening checkout are subject to the WhoCites Terms of Service and Privacy Policy.","inputSchema":{"type":"object","properties":{"domain":{"type":"string","description":"Domain to scan, such as example.com."}},"required":["domain"],"additionalProperties":false},"annotations":{"destructiveHint":false,"idempotentHint":false,"readOnlyHint":false}},{"name":"whocites_get_report","title":"Get WhoCites Report","description":"Return an authenticated, agent-safe WhoCites report by audit ID. Use is subject to the WhoCites Terms of Service and Privacy Policy.","inputSchema":{"type":"object","properties":{"auditId":{"type":"string","description":"WhoCites audit ID."}},"required":["auditId"],"additionalProperties":false},"annotations":{"destructiveHint":false,"idempotentHint":true,"readOnlyHint":true}},{"name":"whocites_get_fixes","title":"Get WhoCites Fixes","description":"Return the builder-ready fixes for an authenticated WhoCites report. Use is subject to the WhoCites Terms of Service and Privacy Policy.","inputSchema":{"type":"object","properties":{"auditId":{"type":"string","description":"WhoCites audit ID."}},"required":["auditId"],"additionalProperties":false},"annotations":{"destructiveHint":false,"idempotentHint":true,"readOnlyHint":true}},{"name":"whocites_start_rescan","title":"Start WhoCites Re-Scan","description":"Start the included post-fix re-scan for an owned report, or return Stripe Checkout for a paid additional re-scan. Use is subject to the WhoCites Terms of Service and Privacy Policy.","inputSchema":{"type":"object","properties":{"auditId":{"type":"string","description":"WhoCites audit ID to re-scan."}},"required":["auditId"],"additionalProperties":false},"annotations":{"destructiveHint":false,"idempotentHint":false,"readOnlyHint":false}},{"name":"whocites_verify_public_scan","title":"Verify Public WhoCites Scan","description":"Verify an opted-in public WhoCites scan token without exposing private report, contact, or Stripe fields. Use is subject to the WhoCites Terms of Service and Privacy Policy.","inputSchema":{"type":"object","properties":{"token":{"type":"string","description":"Public share token from a WhoCites verification URL."}},"required":["token"],"additionalProperties":false},"annotations":{"destructiveHint":false,"idempotentHint":true,"readOnlyHint":true}}],"auth":{"publicTools":["whocites_verify_public_scan"],"paidScanCreation":"whocites_start_scan returns Stripe Checkout. No scan-provider calls happen before payment succeeds.","ownedReads":"whocites_get_report, whocites_get_fixes, and whocites_start_rescan require a report-session cookie or Authorization: Bearer <api-key> mapped server-side to the report owner."},"example":{"jsonrpc":"2.0","id":"tools","method":"tools/list","params":{}},"toolNames":["whocites_start_scan","whocites_get_report","whocites_get_fixes","whocites_start_rescan","whocites_verify_public_scan"]}