# KONDEVS for developers and agents

> The machine interfaces of www.kondevs.com: the read-only MCP server, the markdown pages, the feeds and the partner Content API, with errors, rate limits and versioning. Part of https://www.kondevs.com/llms.txt (the whole site in one file: https://www.kondevs.com/llms-full.txt).

## Start here

- [Developer portal](https://www.kondevs.com/developers.md): quickstart, public interfaces, the Content API, errors, rate limits, versioning
- [Connect to the MCP server](https://www.kondevs.com/.well-known/agent-skills/mcp-connect/SKILL.md): search and read articles, list services, company facts
- [Authentication for agents](https://www.kondevs.com/auth.md): which calls need a key and how a partner gets one
- [Publish an article](https://www.kondevs.com/.well-known/agent-skills/publish-article/SKILL.md): the partner Content API step by step

## MCP tools

`POST https://www.kondevs.com/mcp` (JSON-RPC 2.0, read-only, no key; the revisions 2025-06-18 and 2026-07-28). Every tool takes an optional `lang` (`en` or `de`).

- `search_articles`: Search KONDEVS Content Hub articles about enterprise application integration (EAI), BPM, SAP and AI consulting.
- `get_article`: Fetch a single KONDEVS article by slug, with the body converted to markdown plus its key takeaways and FAQ.
- `list_services`: List the consulting services KONDEVS offers, with the technologies used in each.
- `get_company_info`: Company facts for KONDEVS Ltd.: legal name, registration and VAT numbers, founding year, location, contact details and profiles.

## HTTP endpoints

- `GET /api/` (auth: none): This index: every endpoint with its method, access and purpose, and where the docs are.
- `GET /api/health` (auth: none): Liveness probe.
- `POST /mcp` (auth: none): MCP server (JSON-RPC 2.0, Streamable HTTP): search and read articles, list services, company facts.
- `POST /api/a2a` (auth: none): A2A agent (JSON-RPC 2.0, message/send).
- `GET /api/content/version` (auth: none): Content API version and the rendering capabilities of this site.
- `GET /api/content/catalog` (auth: token (content:read)): Published articles, categories and tags.
- `POST /api/content/catalog` (auth: token (content:write)): Rebuild the article lists and counts from the stored articles after parallel writes: a dry run answering each change (changes[]) and the catalog it leaves; ?apply=1 writes them.
- `POST /api/content/` (auth: token (content:write)): Publish an article; dry_run validates without storing; accepts Idempotency-Key.
- `PUT /api/content/{slug}` (auth: token (content:write)): Replace an article.
- `DELETE /api/content/{slug}` (auth: token (content:write)): Unpublish an article.
- `GET /api/content/tags` (auth: token (content:read)): The tags of the published articles: the same list as the catalog's.
- `POST /api/content/images` (auth: token (content:write)): Upload one image for an article (multipart/form-data: file, slug, variant; at most 10 MB); the answer names its URL. dry_run checks without storing.
- `POST /api/oauth/token` (auth: client): OAuth 2.0 client_credentials: exchange an issued secret for a 1-hour bearer token (RFC 6749 errors).
- `GET /api/oauth/register` (auth: none): How to obtain credentials (issued by human review, no self-service).
- `POST /api/oauth/register` (auth: none): Answers like GET: registration is manual, no client is created and no credential is issued.
- `POST /api/contact` (auth: none): The contact form (CSRF token, consent); answers { success, message }.

## Rate limits

Per client address; rate-limited answers carry `RateLimit` and `X-RateLimit-*` headers, a 429 `Retry-After`.

- `POST /mcp`: 120 per minute
- `POST /api/a2a`: 60 per minute
- `GET /api/content/catalog`: 60 per minute
- `POST /api/content/catalog`: 10 per hour
- `GET /api/content/tags`: 60 per minute
- `POST /api/content/`: 30 per hour
- `PUT /api/content/{slug}`: 30 per hour
- `DELETE /api/content/{slug}`: 30 per hour
- `POST /api/content/images`: 120 per hour
- `POST /api/oauth/token`: 30 per minute
- `POST /api/oauth/register`: 30 per minute
- `POST /api/contact`: 5 per 10 minutes

## Discovery documents

- OpenAPI 3.1: https://www.kondevs.com/openapi.json
- API catalog (RFC 9727): https://www.kondevs.com/.well-known/api-catalog
- MCP server card: https://www.kondevs.com/.well-known/mcp/server-card.json
- A2A agent card: https://www.kondevs.com/.well-known/agent-card.json
- ARD catalog: https://www.kondevs.com/.well-known/ai-catalog.json
- Agent skills: https://www.kondevs.com/.well-known/agent-skills/index.json
- OAuth: https://www.kondevs.com/.well-known/oauth-authorization-server and https://www.kondevs.com/.well-known/oauth-protected-resource
- Personal Agent Protocol: https://www.kondevs.com/.well-known/poppy.json