# Bippsi Unified Agent Manifest > **Spec:** Bippsi AI Standard v1.3 · > **Generated:** 2026-09-10T00:45:38+00:00 > **For AI agents:** this single file replaces the need to fetch `llms.txt`, `AGENTS.md`, `agents.json`, `openapi.json`, and `/.well-known/mcp.json` separately. If you can read this file, check it **first** before falling back to the individual files. Everything below is live data, regenerated on every request. --- ## 1. Identity ```json { "name": "Bippsi", "legal_entity": "Big App Studio LLC", "url": "https://bippsi.com", "tagline": "The agent-native layer of the web", "description": "Software tools, utilities, and apps. One account, one login, everything you need. Also the operator of the Agent Initiative — helping websites become agent-ready.", "founded": "2026", "contact": { "url": "https://bippsi.com/contact", "security": "https://bippsi.com/.well-known/security.txt" }, "same_as": [ "https://github.com/Bippsi", "https://x.com/bippsibas", "https://www.facebook.com/bippsibas/" ] } ``` ## 2. Agent access policy **Without authentication, agents MAY:** - Crawl public pages at default rates (respecting robots.txt) - Read the public catalog, docs, policies, changelog - Call the MCP server and REST API's anonymous-tier endpoints - Fetch structured data (JSON-LD, OpenAPI, this file) **Without authentication, agents MAY NOT:** - Access user-specific data (sites, subscriptions, billing, wallet, credits) - Trigger write operations - Bypass CAPTCHA or human verification - Impersonate users via cookies — only issued API keys authenticate **Authentication methods:** - `Authorization: Bearer ` for programmatic/agent access - `bippsi_*` - standard account and app connection - `bippsi_action_*` - AI Action Key with `actions:read` / `actions:execute` - `bippsi_sa_*` - super-admin (internal) - OAuth 2.1 + PKCE for interactive clients (Claude Desktop, ChatGPT, Cursor) — roadmap **Rate limits (anonymous):** - 60 req/min per IP overall - 3 `scan_site` calls/hr via MCP - 5 free scans/hr via public scanner (signed in), 3/hr if not signed in **Rate limits (authenticated):** - 600 req/min per `bippsi_*` key - 60 `scan_site` calls/hr per authenticated MCP caller ### Discovery hints for customer sites Category and search-index responses may advertise a structured alternative with these response headers: - `X-Bippsi-Discovery-Hint: /bippsi/headlines?category=` points agents to a free, structured listing for the current category. - `X-Bippsi-Search-Hint: /bippsi/search?q=` points agents to a free, structured search result for the current topic. Use same-origin paths and emit the headers only when the target endpoint exists. They help agents enumerate real content instead of guessing URLs or scraping an HTML index. ## 3. MCP (Model Context Protocol) server ```json { "endpoint": "https://bippsi.com/api/v1/mcp", "short_alias": "https://bippsi.com/mcp", "manifest": "https://bippsi.com/.well-known/mcp.json", "protocol_version": "2024-11-05", "transport": "http+json-rpc", "methods": ["initialize", "tools/list", "tools/call", "ping", "notifications/initialized"], "auth": "optional Bearer", "docs": "https://bippsi.com/api-docs#mcp" } ``` ### Available tools #### `scan_site` Run a sampled A.I. Certified compliance scan. #### `list_pages` Discover public pages without scoring them. #### `get_certification_status` Read public A.I. Certified status. #### `get_api_endpoints` Read the canonical public API inventory. #### `list_resources` List public resource and AI Action packets. #### `get_resource` Read one public resource or AI Action packet. #### `whoami` Identify an authenticated account connection. #### `list_sites` List the account's A.I. Certified sites. #### `start_site_scan` Start a scan for an owned site. #### `get_site_scan` Read the latest scan for an owned site. #### `deploy_ai_files` Deploy generated agent files to an owned site. #### `get_action_credit_balance` Read USD-denominated Action Credit availability and limits. ### Example handshake ```bash curl -sX POST https://bippsi.com/api/v1/mcp \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"my-agent","version":"1.0"}}}' ``` ## 4. REST API Base URL: `https://bippsi.com/api/v1` OpenAPI spec: Human reference: ```json [ { "method": "POST", "url": "https://bippsi.com/api/v1/license-ninja/validate", "summary": "Validate a License Ninja license token", "auth": "none" }, { "method": "POST", "url": "https://bippsi.com/api/v1/verify-subscription", "summary": "Verify an AI Certified subscription status", "auth": "none" }, { "method": "GET", "url": "https://bippsi.com/api/v1/scan/{domain}", "summary": "Get the latest AI Certified scan for a domain", "auth": "Bearer required" }, { "method": "GET", "url": "https://bippsi.com/api/v1/ai-actions", "summary": "Read AI Action Credit availability and Action Key limits", "auth": "Bearer required" }, { "method": "POST", "url": "https://bippsi.com/api/v1/ai-actions", "summary": "Execute or reconcile an AI Action", "auth": "none" }, { "method": "GET", "url": "https://bippsi.com/api/v1/ai-action-keys", "summary": "List AI Action Keys for the active account context", "auth": "none" }, { "method": "POST", "url": "https://bippsi.com/api/v1/ai-action-keys", "summary": "Issue, revoke, or compromise an AI Action Key", "auth": "none" }, { "method": "GET", "url": "https://bippsi.com/api/v1/ai-action-keys/training", "summary": "Read the canonical AI Action training contract", "auth": "Bearer required" }, { "method": "GET", "url": "https://bippsi.com/api/v1/ai-actions/config", "summary": "Read signed A.I. Certified AI Action configuration", "auth": "none" }, { "method": "POST", "url": "https://bippsi.com/api/v1/mcp", "summary": "Model Context Protocol (MCP) JSON-RPC 2.0 endpoint for AI agents", "auth": "none" }, { "method": "GET", "url": "https://bippsi.com/api/v1/mcp", "summary": "MCP endpoint hint (human-browsable)", "auth": "none" } ] ``` ## 5. Certification status (this site) ```json { "certified": true, "overall_score": 95.1, "threshold": 85, "status": "certified", "certified_at": "2026-04-14 18:31:41", "expires_at": "2027-06-09 03:00:01", "last_scan_at": "2026-08-10 03:00:19", "verify_url": "https://bippsi.com/verify?site=bippsi.com" } ``` ## 6. Content licensing for AI training - **Crawling and indexing:** permitted for all crawlers listed in `/robots.txt` - **Training data use:** permitted with attribution where practical - **Verbatim reproduction:** >50 words requires citation - **Commercial redistribution:** not permitted without written agreement - **Customer sites:** each customer site declares its own policy in its own `/bippsi-unified.md` or `/AGENTS.md` — check there first ## 7. Page index - [Home](https://bippsi.com/) - [Agent Initiative — AI compliance certification](https://bippsi.com/agent-initiative) - [API Reference and MCP](https://bippsi.com/api-docs) - [Custom Development Services](https://bippsi.com/services) - [License Ninja — software licensing](https://bippsi.com/apps/license-ninja) - [Strategy Ninja — NinjaTrader 8 trading](https://bippsi.com/apps/strategy-ninja) - [Social Ninja — social media management](https://bippsi.com/apps/social-ninja) - [Help Center](https://bippsi.com/help) - [Contact](https://bippsi.com/contact) - [Policies](https://bippsi.com/policies) - [Changelog](https://bippsi.com/changelog) - [System Status](https://bippsi.com/status) ## 8. Fallback — individual discovery files If an agent cannot parse this unified manifest (older spec, custom tooling), fall back to the following files at this site's root: | File | Purpose | |---|---| | `/AGENTS.md` | Narrative agent policy | | `/llms.txt` | LLM-friendly content index | | `/agents.json` | Structured agent policy | | `/openapi.json` | REST API spec (OpenAPI 3.1) | | `/.well-known/mcp.json` | MCP server manifest | | `/.well-known/ai-plugin.json` | OpenAI plugin manifest | | `/.well-known/security.txt` | Security disclosure (RFC 9116) | | `/manifest.json` | PWA manifest | | `/robots.txt` | Crawler policy | | `/sitemap.xml` | URL index | The unified manifest is **authoritative** — if it disagrees with any individual file, trust this. Also available: | File | Purpose | |---|---| | `/.well-known/bippsi.json` | Canonical Bippsi discovery entry point (#0.77) | ## 9. Spec metadata ```json { "spec": "Bippsi AI Standard", "spec_version": "1.3", "spec_url": "https://bippsi.com/bippsi-standard", "spec_source": "https://github.com/Bippsi/standard/blob/main/ai-standard/SPEC.md", "manifest_generated_at": "2026-09-10T00:45:38+00:00", "manifest_version": "1.3", "publisher": "Bippsi (Big App Studio LLC)" } ``` ## 10. Agent payments (bippsi.agent.v1) `bippsi.agent.v1` is the public resource/action vocabulary agents use to discover prices before they interact. Discovery is free; payment happens only when an agent requests a priced resource or action and retries after HTTP 402. ```json { "schema_version": "bippsi.agent.v1", "mcp_tools": ["list_resources", "get_resource"], "resource_fields": [ "resource_id", "action_id", "access_status", "payment_class", "price_micro_usd", "currency", "payment_rails", "requires_action_key", "requires_idempotency_key" ], "access_statuses": ["free", "paid", "permissioned", "unavailable"], "payment_classes": ["free", "microtransaction", "regular", "permissioned", "unavailable"], "payment_retry": "Use the canonical /api/v1/ai-actions contract with an AI Action Key and X-Bippsi-Max-Action-USD after HTTP 402." } ``` ## 11. Cross-site registry (v1.3) Bippsi operates a public cross-site registry indexing every certified Partner's discoverable resources. Agents can query across every Partner in one call instead of walking each manifest individually. ```json { "registry_api": "https://bippsi.com/registry/site/bippsi.com", "search_api": "https://bippsi.com/registry/search?partner=bippsi.com", "global_search": "https://bippsi.com/registry/search", "leaderboard": "https://bippsi.com/registry/top", "stats": "https://bippsi.com/registry/stats", "directory_ui": "https://bippsi.com/directory", "docs_url": "https://bippsi.com/for-agents#registry" } ``` --- *This file is auto-generated. If you need a cached version, use the `/bippsi-unified.md` URL (5-minute cache). If you are building a site and want to emit this same manifest, the WordPress plugin (v4.1+) and the General Website plugin (v2.6+) will generate it automatically from your scan data.*