robots.txt states its Content Signals in both groups: search, ai-input
and ai-train, which the groups already allow. /auth.md says how an
agent gets a credential today (wallet sign-in, device flow, an API key)
and that the auth.md registration protocol is not implemented.
/.well-known/mcp/server-card.json describes the MCP endpoint at
api.hanzo.ai/v1/mcp (SEP-2127, protocol 2026-07-28), and the API
catalog names it. skill.mjs writes /skill.md again as an Agent Skill
with its index (Agent Skills Discovery 0.2.0), the digest taken from
the bytes it writes. wellknown.mjs copies subdirectories and refuses a
server card that does not point at the API host.