Use when reading or changing example.com content, settings, products or pricing through the MCP API at /api/mcp — the 27 JSON-RPC tools, how to authenticate, which changes need a redeploy and which are live immediately, and the commercial scope rule that the product tools enforce.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
설치 방법 보기설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.
/api/mcp is the agentic write path for the site. It exists so copy, settings,
products and prices change without a code edit and without a redeploy — the
values live in Postgres and pages read them at request time.
Reach for this before editing a marketing string in a .tsx file. If the text
is section content, it is almost certainly already DB-driven.
JSON-RPC 2.0 over POST /api/mcp. Two methods: tools/list and tools/call.
curl -s -X POST "$SITE/api/mcp" \
-H "Authorization: Bearer $MCP_SECRET_KEY" \
-H "X-Caller-Label: claude-code" \
-H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
"params":{"name":"list_products","arguments":{}}}'
Bearer MCP_SECRET_KEY + X-Caller-Label. For automation and agents.
The label is mandatory: a valid bearer token with no label is rejected.
MCP_SECRET_KEY is one shared secret, so it identifies that something is
authorised, not who — the label is what lands in the audit trail as
mcp-api-key:<label>. Pass a real, specific label.editor or admin. This is the
path the admin UI uses; the caller is recorded as their email.Anything else gets 401.
| Group | Tools |
|---|---|
| Section content | list_pages, get_section_schema, get_section_content, preview_section_update, update_section_content, get_section_history, rollback_section |
| Blog | list_blog_posts, get_blog_post, create_blog_post, update_blog_post, delete_blog_post, get_blog_categories |
| Careers | list_jobs, get_job, create_job, update_job, delete_job |
| Products & pricing | list_products, upsert_product, set_product_price |
| Site config | get_site_settings, set_app_config, set_feature_flag, set_social_link |
| Short links | list_short_links, create_short_link |
get_section_schema first, then preview_section_update, then
update_section_content. Preview shows the rendered result without writing, and
it is cheap — use it rather than writing and inspecting.
rollback_section exists because every section write is versioned. A bad copy
change is a rollback, not a redeploy.
upsert_product refuses any product whose title, description or category
reads as lead generation, a lead list, or anything priced per lead.
This is a Razorpay merchant-account constraint, not a style preference: checkout may take payment for our SaaS and our own services, and nothing else. The guard sits in the write path precisely because an automation caller has no human at the keyboard to catch it. Do not try to word around it — if a product trips the guard, the product is the problem.
Prices are paise, integers. set_product_price takes paise. A price of 0
means "request a quote" and suppresses the Buy button — it does not mean free.
Never introduce a float. rupeesToPaise / paiseToRupees in
src/lib/form-schema.ts are the only conversions.
| Change | Effect |
|---|---|
| Section content, products, prices, settings, flags, links | Live immediately. Pages read the DB per request. |
| A new field or a new tool | Code change → commit → deploy. |
Anything NEXT_PUBLIC_* | Rebuild, not just restart — it is compiled into the browser bundle. |
If someone asks for "a price change without a deploy", that is set_product_price
and it is already possible. Say so rather than planning a release.
.env.example names MCP_SECRET_KEY; docs/OPS.md §3 says which store holds
the value for which environment.[[site-design]] covers the admin UI that calls these same paths.[[brand]] governs any copy written through them.아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.
로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.
아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.
Apply this site's visual identity — colours, type, logo files and fixed brand strings. Use for any page, component, social asset or document that should look like the site.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use FIRST when someone asks for a new feature or a change to an existing one — before any schema, code or test. Works out what is actually being asked for, whether to build it or integrate a third party (Trustpilot, Stripe, Calendly and the like), where the data lives, who may do what, and what happens when the vendor is down. Produces a decision, then hands to feature-schema.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use when a new feature needs a table, column or capability — evolving the schema so the new thing joins the permission, audit and RLS contract instead of sitting outside it. Covers the DDL/DML split, the resource/capability wiring, and the self-verifying migration.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use after building a feature — explore it in a real browser to find what nobody predicted, then turn each finding into a deterministic test that guards it forever. Covers the agentic pass, what to generate vs hand-write, and how to skip honestly when a capability is missing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Publishing content or deploying site-os — what caches exist, what refreshes them, and how to prove a change is actually live. Use when publishing a post or product, launching a page, deploying, or when someone says a change "isn't showing".
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Handling secrets, keys and credentials for site-os — reading vigyan-secrets.md safely, moving keys into app_secrets, rotating, and responding to an exposure. Use whenever a task touches a key, token, password, .env file, app_secrets, encryption, or the secrets document.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.