Public vs protected
What is available anonymously and what requires authentication on the Blueprint MCP endpoint.
Public tools, no auth required
Read-only retrieval tools are fully anonymous: principles.list, clusters.list, principles.get, clusters.get, examples.get, principles.search, examples.search, and assets.list. signals.feedback is also open to anonymous callers, but only when the user explicitly asks to leave feedback.
Protected tools, authentication required
Personalised tools require a valid Bearer token: me.learning_path and me.coaching_context (any authenticated plan). architect.validate, signals.report, and team.summarize require Pro or Teams plan. me.add_evidence requires course enrollment. Handoff tools (handoffs.operator, handoffs.partnership, handoffs.agency) require Pro or Teams plan.
Access model
Pass an Authorization: Bearer <token> header to unlock protected tools. Public retrieval tools continue to work with or without auth, authentication never degrades the read-only surface. Protected tools return a structured error if the plan does not cover them, not a 401. This is expected plan-gating behavior, not a connection failure.
Choose the path that matches your plan
Keep the information architecture honest: public doctrine access is available now, while Pro is the practitioner layer for protected reports, saved evidence, authenticated MCP, and recurring next actions.
Also in this section