# Hellenic Technologies APIs

Machine-readable catalog: https://hellenictechnologies.com/.well-known/api-catalog
OpenAPI: https://hellenictechnologies.com/openapi.json
Health: https://hellenictechnologies.com/api/health
A2A Agent Card: https://hellenictechnologies.com/.well-known/agent-card.json
Agent Skills: https://hellenictechnologies.com/.well-known/agent-skills/index.json
MCP Server Card: https://hellenictechnologies.com/.well-known/mcp/server-card.json
Web Bot Auth: https://hellenictechnologies.com/.well-known/http-message-signatures-directory
WebMCP: https://hellenictechnologies.com/webmcp.js
DNS-AID: HTTPS ServiceMode records at `_index._agents`, `_mcp._agents`, and `_a2a._agents` under this domain.
ACP: https://hellenictechnologies.com/.well-known/acp.json
UCP: https://hellenictechnologies.com/.well-known/ucp
x402: https://hellenictechnologies.com/.well-known/x402 — `GET /api` and `GET /api/v1` return HTTP 402 with amount 0. This origin does not settle crypto payments.
MPP: OpenAPI `https://hellenictechnologies.com/openapi.json` advertises `x-payment-info` on `/api/acp/checkout_sessions` (amount 0). This origin does not accept agent payments.

Public HTTP endpoints on https://hellenictechnologies.com. Do not invent extra capabilities.

## A2A

JSON-RPC 2.0 at `POST /api/a2a` (`SendMessage`). The Agent Card advertises the AP2 A2A extension for discovery. This origin does not accept payment mandates — commercial work stays on /contact.

## Agent Skills

Index: `/.well-known/agent-skills/index.json` (v0.2.0). Each skill is a `SKILL.md` with a SHA-256 digest.

## MCP

Streamable HTTP at `POST /api/mcp`. Card: `/.well-known/mcp/server-card.json`. Tools: health, public page markdown, discovery URLs.

## Web Bot Auth

Public keys: `/.well-known/http-message-signatures-directory`. Outbound IndexNow pings carry `Signature-Agent` and `Signature-Input` when the signing key is configured.

## WebMCP

`/webmcp.js` registers in-browser tools via `navigator.modelContext.registerTool`: search, navigate, public markdown, discovery, contact.

## DNS-AID

DNS for AI Discovery uses RFC 9460 HTTPS records under `_agents.hellenictechnologies.com`. Query `_index._agents`, `_mcp._agents`, or `_a2a._agents` (type HTTPS). Experimental params use `key65400` (capability URI) and `key65402` (bap). Zone is signed at Cloudflare; the parent DS must be at the registrar for validating resolvers. Republish via `scripts/publish-dns-aid.sh`.

## ACP

Discovery: `/.well-known/acp.json`. This origin does not take agent payments. `POST /api/acp/checkout_sessions` returns `not_ready_for_payment` and points to `/contact`.

## UCP

Business profile at `/.well-known/ucp` (protocol `2026-04-08`). Checkout REST points at `/api/acp/checkout_sessions`. This origin does not complete Universal Commerce Protocol checkout.

## x402

Discovery: `/.well-known/x402`. `GET /api` and `GET /api/v1` return HTTP 402 with an `accepts` offer of amount `0` to the zero address. This origin does not settle x402 payments.

## MPP

OpenAPI at `/openapi.json` includes `x-service-info` and `x-payment-info` on `/api/acp/checkout_sessions` (intent `charge`, method `card`, amount `0`). Agents must not invent a paid order.

## Contact

`POST /api/contact` JSON: name, email, message, consent:true (required); company, phone, topic, locale. Multipart also accepts optional RFP attachments (PDF / Word / PowerPoint / Excel / ZIP, 10 MB total).

## Newsletter

`POST /api/newsletter` JSON: email, consent:true (required); locale, source.

## hellenicAI chat

`POST /api/chat` site-rail conversation. Requires OpenRouter on the origin.

## OmniAI / Chatwoot

`GET /api/chatwoot/webhook` health probe.
`POST /api/chatwoot/webhook` signed inbound messages.

## Legal intake

`POST /api/data-rights` GDPR request.
`POST /api/whistleblower` whistleblower report.

## Markdown for agents

`GET /api/markdown?path=/` or send `Accept: text/markdown` to any public page.