{
    "protocolVersion": "0.3.0",
    "name": "IT-Tremmel GmbH — SaaS / ERP & MiniApps",
    "description": "Business software platform: ERP modules, MiniApps, accommodation, portals and integrations.",
    "url": "https://kunden.it-tremmel.de/api",
    "preferredTransport": "HTTP+JSON",
    "version": "1.0.0",
    "documentationUrl": "https://kunden.it-tremmel.de/.well-known/auth.md",
    "provider": {
        "organization": "IT-Tremmel GmbH",
        "url": "https://kunden.it-tremmel.de"
    },
    "capabilities": {
        "streaming": false,
        "pushNotifications": false,
        "stateTransitionHistory": false
    },
    "defaultInputModes": [
        "application/json"
    ],
    "defaultOutputModes": [
        "application/json"
    ],
    "securitySchemes": {
        "AgentAuth": {
            "type": "http",
            "scheme": "bearer",
            "description": "AgentAuth scoped bearer token. See https://kunden.it-tremmel.de/.well-known/auth.md."
        },
        "OAuth2": {
            "type": "oauth2",
            "description": "OAuth 2.0 client credentials (RFC 6749 §4.4): client_id = public half of the agent key, client_secret = the full agent key. See https://kunden.it-tremmel.de/.well-known/auth.md.",
            "oauth2MetadataUrl": "https://kunden.it-tremmel.de/.well-known/oauth-authorization-server",
            "flows": {
                "clientCredentials": {
                    "tokenUrl": "https://kunden.it-tremmel.de/api/oauth/token",
                    "scopes": {
                        "communication:chat": "communication:chat",
                        "search:read": "Read the public discovery surface and cross-entity platform search (`GET /api/search`).",
                        "erp:read": "Read ERP module data — lists, detail views, exports (`GET /api/erp/…`).",
                        "erp:write": "Create and update ERP records (CRUD writes).",
                        "reports:run": "Execute reporting and analytics reads (`GET /api/reporting/…`).",
                        "audit:read": "Read this tenant's append-only agent audit log (`GET /api/agent-auth/audit`).",
                        "commerce:order": "Complete ACP checkout sessions into orders / booking offers (see /.well-known/payments.json).",
                        "timetracking:read": "timetracking:read",
                        "pii.pseudonymized:read": "pii.pseudonymized:read"
                    }
                }
            }
        }
    },
    "security": [
        {
            "AgentAuth": [
                "communication:chat",
                "search:read",
                "erp:read",
                "erp:write",
                "reports:run",
                "audit:read",
                "commerce:order",
                "timetracking:read",
                "pii.pseudonymized:read"
            ]
        },
        {
            "OAuth2": [
                "communication:chat",
                "search:read",
                "erp:read",
                "erp:write",
                "reports:run",
                "audit:read",
                "commerce:order",
                "timetracking:read",
                "pii.pseudonymized:read"
            ]
        }
    ],
    "skills": [
        {
            "id": "discovery",
            "name": "Discovery & catalogue read",
            "description": "Read the public discovery surface and app/solution catalogue.",
            "tags": [
                "discovery",
                "catalog"
            ],
            "inputModes": [
                "application/json"
            ],
            "outputModes": [
                "application/json"
            ],
            "x-requiredScope": "search:read",
            "x-documentation": "https://kunden.it-tremmel.de/api/docs"
        },
        {
            "id": "erp-read",
            "name": "ERP read",
            "description": "Read ERP module data (lists, detail views, exports).",
            "tags": [
                "erp",
                "read"
            ],
            "inputModes": [
                "application/json"
            ],
            "outputModes": [
                "application/json"
            ],
            "x-requiredScope": "erp:read",
            "x-documentation": "https://kunden.it-tremmel.de/api/docs"
        },
        {
            "id": "erp-write",
            "name": "ERP write",
            "description": "Create and update ERP records.",
            "tags": [
                "erp",
                "write"
            ],
            "inputModes": [
                "application/json"
            ],
            "outputModes": [
                "application/json"
            ],
            "x-requiredScope": "erp:write",
            "x-documentation": "https://kunden.it-tremmel.de/api/docs"
        },
        {
            "id": "reports-run",
            "name": "Run reports",
            "description": "Execute reporting and analytics jobs.",
            "tags": [
                "reports",
                "analytics"
            ],
            "inputModes": [
                "application/json"
            ],
            "outputModes": [
                "application/json"
            ],
            "x-requiredScope": "reports:run",
            "x-documentation": "https://kunden.it-tremmel.de/api/docs"
        },
        {
            "id": "audit-read",
            "name": "Audit read",
            "description": "Read the agent audit log.",
            "tags": [
                "audit"
            ],
            "inputModes": [
                "application/json"
            ],
            "outputModes": [
                "application/json"
            ],
            "x-requiredScope": "audit:read",
            "x-documentation": "https://kunden.it-tremmel.de/api/docs"
        },
        {
            "id": "acp-checkout",
            "name": "Agentic checkout (ACP)",
            "description": "Create, quote and complete ACP checkout sessions (orders / booking offers).",
            "tags": [
                "commerce",
                "checkout",
                "acp"
            ],
            "inputModes": [
                "application/json"
            ],
            "outputModes": [
                "application/json"
            ],
            "x-requiredScope": "commerce:order",
            "x-documentation": "https://kunden.it-tremmel.de/api/docs"
        }
    ],
    "x-a2a-status": "preview",
    "x-transport-note": "No A2A JSON-RPC server is exposed yet. Use the documented REST API at https://kunden.it-tremmel.de/api with an AgentAuth bearer token (see auth.md), or the MCP gateway at https://kunden.it-tremmel.de/api/mcp (streamable-http, read-only).",
    "x-mcp": {
        "transport": "streamable-http",
        "url": "https://kunden.it-tremmel.de/api/mcp",
        "protocolVersion": "2025-06-18",
        "authentication": {
            "type": "bearer",
            "standard": "AgentAuth",
            "hint": "Authorization: Bearer itt_agt_… (scoped agent token, see auth.md; sessions are not accepted)",
            "specification": "https://kunden.it-tremmel.de/.well-known/auth.md"
        },
        "authorization": {
            "type": "oauth2",
            "specification": "MCP authorization 2025-06-18 (RFC 9728 + RFC 8414)",
            "required": true,
            "appliesTo": "https://kunden.it-tremmel.de/api/mcp",
            "protectedResourceMetadata": "https://kunden.it-tremmel.de/.well-known/oauth-protected-resource",
            "authorizationServerMetadata": "https://kunden.it-tremmel.de/.well-known/oauth-authorization-server",
            "authorizationServers": [
                "https://kunden.it-tremmel.de"
            ],
            "grantTypes": [
                "client_credentials"
            ],
            "tokenEndpoint": "https://kunden.it-tremmel.de/api/oauth/token"
        },
        "x-mcp-status": "read-only"
    },
    "x-ucp": "https://kunden.it-tremmel.de/.well-known/ucp",
    "x-steering": {
        "status": "ui-affordance",
        "hosts": "Phase-one steering hosts only (localhost / beta.* / *.local / first-party desktop shells), authenticated session required.",
        "pageManifest": {
            "windowGetter": "__ITT_STEERING_MANIFEST__",
            "domIsland": "#itt-steering-manifest",
            "description": "Per-route manifest of the steering commands available on the CURRENT page (module ids, command ids, localized titles, parameter schemas, availability). Call window.__ITT_STEERING_MANIFEST__() or read the JSON <script> island."
        },
        "domAttributes": {
            "command": "data-steer-command",
            "fixedParams": "data-steer-params",
            "description": "Interactive elements bound to a registered steering command carry data-steer-command=\"<moduleId>.<commandId>\" (plus data-steer-params JSON when the command has fixed parameter defaults). Elements are also addressable by data-testid for envelope click/fill actions."
        },
        "envelope": {
            "format": "RemoteSteeringEnvelope { id: string, action: string, args: object }",
            "allowedActions": [
                "navigate",
                "click",
                "fill",
                "waitFor",
                "speak",
                "highlight",
                "spotlight",
                "tour"
            ],
            "maxSteps": 30,
            "validator": "Server: App\\Service\\SteeringScriptValidator; UI mirror: GENERATED_SCRIPT_ALLOWED_ACTIONS (generatedScriptValidation.ts)."
        },
        "sessionApi": {
            "url": "https://kunden.it-tremmel.de/api/remote-steering",
            "note": "Remote-steering sessions are consent-gated in-app; commands are delivered over /api/remote-steering/events (SSE) and executed by the same registry."
        }
    }
}