# Volpi Capital Public Site API

The public site exposes read-only discovery endpoints for crawlers and agents.

## Endpoints

- `GET /` - HTML homepage by default, Markdown when `Accept: text/markdown` is sent.
- `GET /health` - Public health metadata.
- `GET /sitemap.xml` - XML sitemap.
- `GET /.well-known/api-catalog` - RFC 9727 API catalog.
- `GET /.well-known/oauth-protected-resource` - OAuth Protected Resource Metadata.
- `GET /.well-known/oauth-authorization-server` - OAuth authorization server metadata.
- `GET /.well-known/mcp/server-card.json` - MCP server card.
- `POST /mcp` - Minimal MCP-compatible JSON-RPC endpoint for site summary tools.

All public discovery endpoints are unauthenticated.