--- title: "Uxify Developer Docs - MCP Server, OAuth 2.0 & Agent Access | Uxify" description: "Developer documentation for Uxify: the Uxify MCP server, OAuth 2.0 discovery and scopes, and the machine-readable files agents can read without credentials." url: https://uxify.com/developers/ format: agent view of this page (its text, without site navigation) --- Developers # Uxify for developers Everything you need to call Uxify from code or from an AI agent: the Uxify MCP server, OAuth 2.0 discovery and scopes, and the files an agent can read before it has any credentials. [Start with MCP](#mcp) · [Read the docs](https://help.uxify.com/en/) mcp-config.json ``` { "mcpServers": { "uxify": { "url": "https://mcp.uxify.com", "headers": { "Authorization": "Bearer " } } } } ``` ## The Uxify MCP server Uxify's programmatic surface is an MCP server. It is authenticated, not public: every call carries a token tied to a Uxify account. MCP access is included on every plan, including Free. Endpoint `https://mcp.uxify.com` Transport Streamable HTTP Auth OAuth 2.0 bearer token, workspace-scoped ### Scopes - `mcp:list_sites` Enumerate the sites in the authorizing workspace. - `mcp:manage_sites` Add a site to the workspace and get its tracking snippet. - `mcp:ask_uxi` Ask Uxi questions against that workspace. - `mcp:ask_uxi_rum` Query real-user monitoring data - Core Web Vitals, behavior, and agent activity. ### Per-client setup guides [Claude](https://app.uxify.com/integrations/claude) · [ChatGPT](https://app.uxify.com/integrations/chatgpt) · [n8n](https://app.uxify.com/integrations/n8n) · [Zapier](https://app.uxify.com/integrations/zapier) ## Uxify OAuth 2.0 authentication Uxify implements standard OAuth 2.0 discovery, so a client can work out how to authenticate without being told in advance. 1. 1 ### Discover the resource Fetch /.well-known/oauth-protected-resource from the MCP origin. It names the resource to request a token for (https\://mcp.uxify.com), its authorization server, and every scope on offer. The uxify.com copy carries the same server and scopes under its own host, as RFC 9728 requires. 2. 2 ### Discover the authorization server Follow authorization\_servers to app.uxify.com, whose RFC 8414 metadata lives at /.well-known/oauth-authorization-server. Requesting that path on uxify.com redirects there. 3. 3 ### Register and authorize Dynamic client registration is open at /oauth2/register, and the authorization code flow requires PKCE with S256. Ask only for the scopes the task needs. 4. 4 ### Call the server Send the access token as a bearer credential in the Authorization header. An unauthenticated initialize returns an OAuth challenge - that is the handshake working, not an error to route around. ## Machine-readable Uxify endpoints These need no credentials. An agent that lands on uxify.com cold can read all of them. | Path | Content type | What it holds | | ------------------------------------------------------------------------------------------------- | ---------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- | | [`/llms.txt`](https://uxify.com/llms.txt) | `text/plain` | What Uxify is, when an agent should reach for it, and how to call it. | | [`/llms-full.txt`](https://uxify.com/llms-full.txt) | `text/plain` | The full text of every blog post, glossary term, and case study in one file, generated at build time. | | [`/pricing.md`](https://uxify.com/pricing.md) | `text/markdown` | Plans, limits, and prices as plain markdown - no HTML scraping. | | [`/auth.md`](https://uxify.com/auth.md) | `text/markdown` | auth.md: how an agent signs its user up and gets an MCP token without an OAuth client - the user confirms once with a code. | | [`/sitemap.xml`](https://uxify.com/sitemap.xml) | `application/xml` | Every indexable URL, with lastmod dates. | | [`/.well-known/oauth-protected-resource`](https://uxify.com/.well-known/oauth-protected-resource) | `application/json` | RFC 9728 metadata: the resource, its authorization server, and the scopes it accepts. | | [`/.well-known/ai-catalog.json`](https://uxify.com/.well-known/ai-catalog.json) | `application/ai-catalog+json` | Domain-level AI Catalog (MCP SEP-2127): lists the Uxify MCP server, agent skills and API catalog, and links to the Server Card. | | [`/.well-known/ard.json`](https://uxify.com/.well-known/ard.json) | `application/json` | The same manifest at the Agentic Resource Discovery (ARD) address, with display names and representative queries. | | [`/.well-known/agent-skills/index.json`](https://uxify.com/.well-known/agent-skills/index.json) | `application/json` | Agent Skills Discovery index: SKILL.md files for connecting to Uxify, analyzing real-user performance and auditing a public site's speed. | | [`/server-card`](https://uxify.com/server-card) | `application/mcp-server-card+json` | MCP Server Card (SEP-2127): server identity, endpoint, transport, and supported protocol versions, readable before connecting. | | [`/.well-known/api-catalog`](https://uxify.com/.well-known/api-catalog) | `application/linkset+json` | RFC 9727 API catalog: lists the Uxify MCP server with its Server Card, docs, OAuth metadata, and status page. | Every page on uxify.com has a clean markdown version without navigation at its path with `.md` added (`/index.md` for the home page), linked from the page with ``. Pages also return markdown when requested with `Accept: text/markdown`. Missing paths return a real 404 with a markdown body naming the sitemap, llms.txt, and the main sections, so an agent following a stale link can recover. FAQ ## Uxify developer FAQ ### Does Uxify have a public REST API? Not today. The Uxify MCP server at mcp.uxify.com is the supported programmatic surface, and it covers querying real-user data, benchmarks, and agent activity. There is no public REST API and no OpenAPI document, so if you find one referenced somewhere it is not ours. ### Is the Uxify MCP server public? No. Every request needs an access token tied to a Uxify account and scoped to that workspace. There is no anonymous tool listing and no read-only public surface. An unauthenticated initialize returns an OAuth challenge by design, which is what lets a client discover how to authenticate without guessing. ### How does an agent authenticate with Uxify? Through standard OAuth 2.0 discovery. Fetch the RFC 9728 protected-resource metadata at uxify.com/.well-known/oauth-protected-resource, follow it to the authorization server at app.uxify.com, register dynamically if needed, and run the authorization code flow with PKCE. Scopes are named - mcp:list\_sites, mcp:manage\_sites, mcp:ask\_uxi, and mcp:ask\_uxi\_rum - so a client can request least privilege. ### What can I read from Uxify without an account? The static, machine-readable files: llms.txt for what Uxify does and when to use it, pricing.md for plans and limits, sitemap.xml for every indexable URL, and the OAuth protected-resource metadata. Every page on uxify.com has a clean markdown version at its path with .md added (/index.md for the home page), linked from each page's , and also returns markdown when requested with an Accept: text/markdown header, including the 404 page, which lists recovery targets. ### Which MCP clients does Uxify support? Any client that speaks the Model Context Protocol. Uxify publishes step-by-step setup guides for Claude, ChatGPT, n8n, and Zapier; Cursor, VS Code, and other MCP-compatible tools connect with the same config, since the protocol is open. MCP access is included on every plan, including Free. --- Page: https://uxify.com/developers/ Site overview for agents: https://uxify.com/llms.txt · Plans and prices: https://uxify.com/pricing.md · Book a demo: https://uxify.com/book-demo/