Quickstart
- Create a bearer token as an administrator.
- Store it server-side or in your MCP client.
- Use
POST /mcpor the REST endpoints. - Use a real site ID for site-scoped data.
POST https://commander.stouterenterprises.com/mcp Authorization: Bearer YOUR_TOKEN
Authentication
Authorization: Bearer YOUR_SITE_COMMANDER_TOKEN
Keep the token private. Never put it in browser JavaScript or public HTML. The central Zernio key remains encrypted in Site Commander.
Discovery
/mcp · /llms.txt · /.well-known/ai-plugin.json · /openapi.json · /api/control-plane/guide.md
Control-plane reads
GET /api/control-plane/status GET /api/control-plane/sites GET /api/control-plane/tasks GET /api/control-plane/activity?site_id=SITE_ID GET /api/control-plane/conversations?site_id=SITE_ID GET /api/control-plane/messages?conversation_id=CONVERSATION_ID
Activity and custom fields
Send messages, subscriptions, contacts, and leads with your own taxonomy:
POST /api/control-plane/events
{"site_id":123,"type":"message","external_id":"crm-8842","category":"support","subcategory":"billing","folder":"vip","source":"contact-widget","status":"open","priority":"high","tags":["enterprise"],"custom_fields":{"plan":"pro"},"message":"I need help."}
Additional keys are preserved as metadata. Duplicate external IDs for the same site are ignored.
Google reviews
GET /api/control-plane/reviews?site_id=SITE_ID GET /api/control-plane/zernio/reviews?site_id=SITE_ID POST /api/control-plane/reviews/reply
Conversations
POST /api/control-plane/messages/reply
{"conversation_id":456,"message":"Thanks — we will follow up.","metadata":{"category":"support","folder":"vip"}}
Central Zernio gateway
GET /api/control-plane/zernio/accounts?site_id=SITE_ID GET /api/control-plane/zernio/reviews?site_id=SITE_ID POST /api/control-plane/zernio/posts?site_id=SITE_ID
The gateway uses encrypted central Zernio credentials, enforces site scope, and audit logs operations. It does not forward arbitrary Zernio URLs.
MCP
Connect to https://commander.stouterenterprises.com/mcp. Use sitecommander_api_guide to read the complete Markdown contract. Read tools include status, sites, tasks, activity, conversations, reviews, and Zernio accounts.
Security
- Bearer tokens are private credentials.
- Site-scoped requests require a site ID.
- The internal Current Site workspace is never exposed.
- Zernio keys are never returned.
- Gateway actions are audit logged.