Skip to main content
SiteGPT can be used by both people and personal AI agents. If your AI assistant can run terminal commands, give it SiteGPT CLI access. If your assistant supports remote MCP servers, connect it to the SiteGPT MCP server instead. SiteGPT also publishes an agent-readable Auth.md file at https://sitegpt.ai/auth.md. Agents can use it to discover the anonymous try-before-signup onboarding flow without needing prior SiteGPT-specific instructions.

Machine-readable surfaces for agents

SiteGPT publishes its content and discovery metadata in agent-friendly forms:
  • Markdown twins on every page: every public sitegpt.ai marketing page serves a markdown version — append .md to the URL (https://sitegpt.ai/pricing.md; the homepage is https://sitegpt.ai/index.md), or request the page with Accept: text/markdown. Docs pages under /docs serve native .md twins the same way (https://sitegpt.ai/docs/setup/quickstart.md); blog and resources posts answer only the Accept: text/markdown form. Marketing .md responses open with a frontmatter block naming the canonical HTML URL.
  • llms.txt: https://sitegpt.ai/llms.txt states this convention and links the canonical machine-readable entry points — prefer it over scraping HTML.
  • Docs MCP server: https://sitegpt.ai/docs/mcp (Streamable HTTP, no authentication) gives agents search and retrieval over this documentation. See the MCP server guide.
  • Agent auth discovery: the OAuth discovery metadata at https://sitegpt.ai/.well-known/oauth-authorization-server carries an agent_auth block pointing at auth.md and the anonymous registration endpoint, including an anonymous_supported block with the exact request shape, plus an identity_assertion block describing Sign in with AgentID. See OAuth device flow.
  • Agent-mode views: requesting a marketing page with ?mode=agent as the sole query parameter redirects to its markdown twin — the same view the .md suffix serves.
  • A2A agent card: https://sitegpt.ai/.well-known/agent-card.json declares the SiteGPT Support Agent — a no-auth JSON-RPC message/send endpoint at https://sitegpt.ai/a2a that answers questions about SiteGPT itself. See A2A agent.

Use MCP Server

Best for Claude and other AI apps that support remote MCP with browser-based OAuth approval.

Use the CLI

Best for local agents that can run terminal commands and use saved SiteGPT profiles.

Sign in with AgentID

Agents that hold their own AgentID identity (an AgentMail inbox with a registered signing key) can create and use a full SiteGPT account without a human in the loop:
  1. Open https://sitegpt.ai/auth/agentid. SiteGPT redirects to AgentID’s authorization endpoint with a PKCE challenge.
  2. Approve the request out of band: sign the challenge (jti + your inbox_id) with your registered ES256 key and POST it to AgentID’s approve endpoint, then let the wait page redirect back.
  3. SiteGPT verifies the returned identity token against AgentID’s published keys and signs you in as your-inbox@agentmail.to — a normal SiteGPT account with the same dashboard, API tokens, and billing a person gets. A verified email is required; unverified AgentMail inboxes are refused.
The flow is advertised machine-readably in the agent_auth.identity_assertion block of the OAuth discovery metadata and in auth.md. After signing in, mint an API token from the dashboard and continue with the CLI, SDKs, or MCP server as usual.

Choose the right agent flow

Choose the flow before making authentication a blocker. For agent-first onboarding, PROFILE_NOT_CONFIGURED simply means no saved CLI profile exists; the agent should continue with sitegpt onboarding start instead of asking the user to sign in. For no-account onboarding, do not ask the user to log in first. Let the agent create a temporary chatbot, configure and test it, then share the onboarding URL for preview and claim. For existing accounts, the recommended pattern is:
  1. Install the CLI on the machine where the agent runs.
  2. Log in with a named, scoped profile.
  3. Give the agent the SiteGPT CLI skill file.
  4. Ask the agent to use sitegpt ... --json commands and confirm destructive actions.

What your agent needs

Your AI agent needs three things: The public SiteGPT CLI skill file is available at:
Some AI products call this a skill file, project instruction, custom instruction, memory, or tool guide. The name varies, but the idea is the same: give the agent this document before asking it to manage SiteGPT. The same skill also ships as an installable package from the sitegpt/agent-skills repository — dual-packaged as an Agent Skills repo and a Claude Code plugin marketplace, with platform config files for Cursor, Windsurf, and Claude Code:
Both deliver the same skill as the public skill file above.
1

Install the CLI

2

Create a dedicated profile for the agent

Use a named profile instead of your default profile. This makes it obvious when the agent is operating SiteGPT.
The browser approval page lets you review the access being requested before creating the token.
3

Verify the profile

4

Give the agent the skill file

Tell your agent to read this URL before using SiteGPT:
5

Ask for JSON output

Tell the agent to use --json whenever it needs IDs or structured data.

Copy-ready agent instruction

Paste this into your personal AI agent’s instructions, project knowledge, or chat before asking it to work with SiteGPT:
If you use a different profile name, replace sitegpt-agent in the instruction.

Safer authentication choices

Use the smallest access level that can complete the job. For a chatbot-scoped knowledge profile:
For broad end-to-end chatbot creation, use browser approval and review the permissions shown on the approval page:
Full access is convenient for trusted local agents, but least-privilege scoped profiles are better for repeated workflows.

Manual token setup

If you prefer to choose permissions in the dashboard first:
1

Create a token in SiteGPT

Open the SiteGPT dashboard, go to Agents, click Create token, choose the access level or custom scopes, and optionally restrict the token to specific chatbots.
2

Copy the token once

SiteGPT shows the plaintext token only once. Store it somewhere safe before closing the modal.
3

Save it into an agent profile

4

Verify it

After this, your agent can use the profile without seeing the raw token.

Example prompts for your agent

Try SiteGPT before signup

Detailed playbook: New customer onboarding.

Create a chatbot in an existing account

Detailed playbook: Existing account setup.

Add and verify knowledge

Review recent support activity

Update bot behavior

What agents can manage

Use the command reference for the complete command surface.

Best practices

  • Use named profiles for agents, such as setup-agent, knowledge-agent, and support-agent.
  • Prefer --json when the agent needs IDs, document states, token IDs, or nested data.
  • Ask or infer the chatbot purpose before setup so the persona, instructions, starters, followups, and lead capture match the job.
  • For no-account onboarding, ask agents to run sitegpt onboarding status --json and inspect setupChecklist before sharing the onboarding URL.
  • For existing accounts, ask agents to run sitegpt profiles list and sitegpt whoami before making changes.
  • For no-account onboarding, do not treat PROFILE_NOT_CONFIGURED as a failure; continue with onboarding.
  • Restrict tokens to specific chatbots when the agent only needs one chatbot.
  • Confirm before destructive commands such as delete, revoke, remove, or bulk cleanup.
  • Rotate or revoke tokens after demos, shared sessions, or experiments.
  • Do not paste raw SiteGPT API tokens into chats unless you fully trust the environment.

Troubleshooting

For more fixes, see Troubleshooting.