Agent API and MCP
Let an authorized coding agent find Pursuits, install Suites, create Sprints, and submit a private package without gaining practice or billing authority.
The chasing-mastery MCP server is a stateless typed projection of the same
versioned Member API used by first-party setup flows. It is not a second domain
backend.
Authorization
Agents use OAuth 2.1 authorization code with PKCE, signed first-party consent, short-lived audience-bound access tokens, and rotating refresh tokens. Never paste a browser session, password, store credential, publisher key, Station credential, or bearer token into a prompt.
| Scope | Allows |
|---|---|
club.read | search Pursuits and Library listings; inspect bounded setup state |
club.manage | join/create a Pursuit, add a Suite, configure modes and Sprints |
packages.submit | send an exact portable package for owner-private review |
Allowlisted workflow
An authorized agent can:
- search and join a listed Pursuit or create a private one;
- search the Library and inspect an exact listing;
- idempotently add its Suite and provision package-default modes;
- create/configure/activate a Sprint;
- submit a locally authored
.cmpkgand poll owner-private review status.
It cannot perform Attempts, make purchases, publish a public Pursuit, moderate community content, approve native connector grants, control Station/OBS, or bypass package review.
Protocol endpoints
| Endpoint | Purpose |
|---|---|
/.well-known/oauth-authorization-server/api/auth | authorization-server metadata |
/.well-known/oauth-protected-resource/mcp | resource metadata and supported scopes |
/api/auth/oauth2/authorize | first-party consent |
/mcp | stateless Streamable HTTP MCP |
docs/public-api.mdExact route, authority, idempotency, and response behavior.
apps/member-api/src/mcp.tsCurrent tool names, schemas, and mapping to /v1 handlers.
docs/decisions/0022-scoped-agent-operated-club-setup.mdWhy OAuth scopes and one domain implementation are mandatory.
plugins/chasing-mastery-author/skills/manage-chasing-mastery-club/SKILL.mdHuman-readable agent workflow over the bounded tools.