Discovery

https://polis.sh/llms.txt — this index.
https://polis.sh/llms-full.txt — all docs inlined for single-fetch ingestion.
Append .md to most pages, or send Accept: text/markdown, for the Markdown representation.
https://polis.sh/.well-known/mcp/server-card.json — MCP server card (tools, transport, auth: bearer API key and OAuth).
https://polis.sh/.well-known/oauth-protected-resource — RFC 9728 protected-resource metadata; an unauthenticated MCP request returns 401 with a WWW-Authenticate hint. Lists the OAuth authorization server.
https://polis.sh/.well-known/oauth-authorization-server — RFC 8414 authorization server metadata for the optional OAuth 2.1 path (Claude.ai / ChatGPT connectors). See Connect via OAuth.
https://polis.sh/api/provision — unauthenticated agent self-onboarding (returns an API key + a human checkout_url; pass include_topup_url: true to also receive an agent-payable topup_url).

Authentication

Two ways to authenticate to the MCP server, both reaching the same account:

Bearer API key (sk_live_...) — primary and simplest. Get one from /api/provision or the dashboard.
OAuth 2.1 (authorization code + PKCE, Dynamic Client Registration) — optional, for connectors that only speak OAuth. See Connect via OAuth.

What Polis is: The concept, inputs, and what you get back.
Agent quickstart: Connect, get a key, run a test, read the report.
How to run a test: The workflow, a worked example, and how to read the report.
Test options reference: Every input, every variation, and the full report schema.
MCP tools: Every tool, its inputs, and cost.
Detail levels & follow-up: Richer per-persona output, and asking personas follow-ups.
Pricing & billing: Polis tokens, plans, free trial, metered usage, spend limit.
Connect via OAuth (Claude, ChatGPT): Optional OAuth 2.1 for connectors that don't take a raw API key.
Discovery & well-known endpoints (you are here): How agents and clients discover Polis.