# AGENTS.md: Stevens Keys

Standing instructions for AI agents, crawlers and bots. Agent traffic is welcome and never blocked.

## What this is
Stevens Keys provides license keys, edge validation and usage metering for paid MCP servers and APIs. It is an HTTP API (`https://stevens-keys.pages.dev/v1/`) plus a hosted MCP server (`https://stevens-keys.pages.dev/mcp`, Streamable HTTP, no auth).
- Free in TEST MODE: no real charges, no card required.
- No A2A JSON-RPC endpoint. A2A messaging is not supported.
- Not listed in any MCP registry or directory yet.
- Operator: Stevens Keys / Canada Site Ops, canada.site.ops@gmail.com.

## How to start
1. Read https://stevens-keys.pages.dev/llms.txt (or https://stevens-keys.pages.dev/llms-full.txt for everything).
2. MCP clients: connect to https://stevens-keys.pages.dev/mcp. Tools: `create_demo_key`, `validate_license_key`, `get_public_stats`. For stdio clients: `npx -y mcp-remote https://stevens-keys.pages.dev/mcp`.
3. Agent Skill: https://stevens-keys.pages.dev/.well-known/agent-skills/index.json
4. HTTP: see https://stevens-keys.pages.dev/openapi.json. To try a key, run `POST /v1/demo/keys` (a 24h sandbox key, 50 calls), then `POST /v1/validate` with `Authorization: Bearer <key>`.
5. Send `X-Client-Type: agent` if your User-Agent doesn't identify you as an agent.

## Machine files
- OpenAPI: https://stevens-keys.pages.dev/openapi.json
- Agent Skills index: https://stevens-keys.pages.dev/.well-known/agent-skills/index.json
- Agent card (no A2A RPC): https://stevens-keys.pages.dev/.well-known/agent-card.json
- agents.json: https://stevens-keys.pages.dev/.well-known/agents.json
- MCP server.json: https://stevens-keys.pages.dev/server.json
- MCP server card: https://stevens-keys.pages.dev/.well-known/mcp/server-card.json
- Agent quickstart: https://stevens-keys.pages.dev/agent-quickstart.md
- Public stats (no auth): https://stevens-keys.pages.dev/v1/public-stats
- API catalog: https://stevens-keys.pages.dev/.well-known/api-catalog
- Docs: https://stevens-keys.pages.dev/docs

## Rules
- Use test-mode keys only. Don't create fake traffic or load-test.
- Don't scrape /dashboard, /reset or the authenticated /v1/ routes.