SOLUTION
For developers
One capability registry, three machine surfaces: OpenAPI, MCP and A2A.
Product teams exposing business knowledge through APIs, MCP, A2A and connected systems
Produce consistent machine contracts and controlled workflows from one canonical capability registry.
Scope, role, entitlement and write authority are enforced by the server, never asserted by the client.
Contracts are generated, not hand-written
The REST contract, the MCP tool list and the A2A agent card come from the same canonical registry, so they cannot drift apart.
Authorization is server-side
Tool exposure, scopes and write permission are decided by the server and reviewed before a tool becomes callable.
Install path
A human installation page lives at /mcp-server; the machine endpoint stays at /mcp and is never wrapped in marketing HTML.