Public vs protected
What is available anonymously and what requires authentication on the Blueprint MCP endpoint.
Public tools — no auth required
Read-only retrieval tools are fully anonymous: list_principles, list_clusters, get_principle, get_cluster, get_example, search_principles, search_examples, and list_agent_assets. Signal tools (report_value_event, submit_feedback) are also anonymous-allowed but opt-in only — never called automatically.
Protected tools — authentication required
Personalised tools require a valid Bearer token: get_my_learning_path and get_my_coaching_context (any authenticated plan). validate_agent_architecture and summarize_team_usage require Pro or Teams plan. add_evidence_note requires course enrollment. Handoff tools (request_operator_handoff, request_partnership_handoff, request_agency_handoff) are for admin use only.
Access model
Pass an Authorization: Bearer <token> header to unlock protected tools. Public retrieval tools continue to work with or without auth — authentication never degrades the read-only surface. Protected tools return a structured error if the plan does not cover them, not a 401. This is expected plan-gating behavior, not a connection failure.
Choose the path that matches your plan
Keep the information architecture honest: public doctrine access is available now, while Pro is the practitioner layer for protected reports, saved evidence, authenticated MCP, and recurring next actions.
Also in this section