DOCSPontx Hub
Public docsv1
On this pageAgent & API discovery

Machine-readable entry points / open standards

Let tools discover APIs, Skills, and safe-call rules from pontx.dev.

Discover Pontx Hub through the RFC 9727 API Catalog, Agent Skills Discovery, OpenAPI, and llms.txt, then verify installable Skills with SHA-256 digests.

01

Start with standard entry points

Pontx publishes an API Catalog, OpenAPI description, Agent Skills index, and text map, so an agent does not need to know the site structure first.

/.well-known/api-catalog

The RFC 9727 entry point linking API services to OpenAPI, documentation, and Skill metadata.

/.well-known/agent-skills/index.json

The Agent Skills Discovery v0.2 index with downloadable archives and SHA-256 digests.

/openapi.json

An OpenAPI 3.1 description for search, products, Endpoints, Schemas, and Skill discovery.

/llms.txt

A compact model-facing map to indexable human documentation and machine interfaces.

Read the discovery entry points
curl --fail https://pontx.dev/.well-known/api-catalog
curl --fail https://pontx.dev/.well-known/agent-skills/index.json
curl --fail https://pontx.dev/openapi.json
curl --fail https://pontx.dev/llms.txt
02

Download and verify a Skill

Each index digest is the archive's SHA-256. Verify it before extraction; SKILL.md is at the archive root.

Verify the pontx-hub Skill
curl --fail --output pontx-hub.tar.gz \
  https://pontx.dev/.well-known/agent-skills/pontx-hub.tar.gz

# Compare this value with the index digest after removing the "sha256:" prefix.
shasum -a 256 pontx-hub.tar.gz
tar -tzf pontx-hub.tar.gz

The archive also includes its license, agent metadata, and an on-demand safety reference. Product Skills use the same discovery and digest contract.

03

Load only the source the task needs

Each source answers a different question. Avoid copying the complete API catalog into long-lived context.

  • Finding an API or field: use /api/v2/search, then load details by stable resource ID.
  • Generating tool calls: read the current discovery surface from /openapi.json.
  • Installing a workflow: select and verify a universal or product Skill from the Agent Skills index.
  • Answering with citations: link the matching localized API, Endpoint, Schema, or guide page.
Search the live catalog by capability
curl --get https://pontx.dev/api/v2/search \
  --data-urlencode "q=exchange rate" \
  --data-urlencode "locale=en"
04

Discovery is not execution permission

These entry points let tools read public material and prepare requests, but they do not expand the user's authority over an external API.

  • Search, Skill installation, OpenAPI reads, and request previews are read-only steps.
  • GET or HEAD is called only when the user requests execution.
  • POST, PUT, PATCH, or DELETE requires a preview of the exact request followed by explicit confirmation.
  • Credentials come from the local environment or current browser session and never belong in logs, URLs, or agent responses.

Continue with the Agent Skill workflow or review the complete credential and confirmation boundaries.

Read the safety guide