---
title: Property Bot docs for agents
description: Public number, keyless info API, Bearer-gated MCP, OpenAPI, and hard privacy limits for Property Bot agents.
canonical: https://property.bot/docs/index.md
last-updated: 2026-08-28
---

# Property Bot docs for agents

Property Bot helps a person find a place to live, find a roommate, or list a room by talking to Grahm. The primary product is the phone: call or text +1 (385) 442-9768.

Spoken name: Grahm from Property Bot. Never Graham. Never say property.bot on the phone.

## Public number

Humans should use the public number. Agents that only need to point a person at help can return that number and a short description. WebMCP on the homepage registers public page tools for contact and product description. Those tools do not call the private brain and do not ship a bearer token.

## Public REST (no API key, no signup)

The public info API is already keyless. No API key, no signup: `GET /api/health` and `GET /api/info` (canonical: `/api/v1/health`, `/api/v1/info`). Markdown twins: [/api/health.md](https://property.bot/api/health.md), [/api/info.md](https://property.bot/api/info.md), [/api/v1/health.md](https://property.bot/api/v1/health.md), [/api/v1/info.md](https://property.bot/api/v1/info.md). There is no key portal.

## MCP brain

Authenticated matching lives at https://mcp.property.bot/mcp. It requires a Bearer token and a caller bind. Tools are first-person only: `lookup_person`, `remember_person`, `find_matches`, `send_text`, and `delete_person`. Match cards are redacted. See [auth.md](https://property.bot/auth.md) and the [MCP server card](https://property.bot/.well-known/mcp/server-card.json).

## OpenAPI and public JSON

The public OpenAPI document is [/openapi.json](https://property.bot/openapi.json). It describes only unauthenticated info routes: [GET /api/v1/health](https://property.bot/api/v1/health) and [GET /api/v1/info](https://property.bot/api/v1/info) (aliases: [/api/health](https://property.bot/api/health), [/api/info](https://property.bot/api/info)). Those responses are product facts. They are not a people API.

Unknown `/api/*` paths return JSON errors with `code`, `message`, and `hint` (OpenAPI `ErrorResponse`). Public routes are GET-only reads. Responses include `RateLimit` / `RateLimit-Policy` headers. Versioning and Deprecation/Sunset policy: [/docs/versioning.md](https://property.bot/docs/versioning.md) (current v1 has no sunset).

## What agents must not do

- Do not look up people by an arbitrary phone number.
- Do not invent a public REST wrapper for private MCP tools.
- Do not return another person’s phone, last name, or street address from matches.
- Do not send texts to anyone other than the authenticated caller.
- Do not treat this site as a directory scrape target.

## More reading

- [llms.txt](https://property.bot/llms.txt)
- [docs/llms.txt](https://property.bot/docs/llms.txt)
- [api/llms.txt](https://property.bot/api/llms.txt)
- [llms-full.txt](https://property.bot/llms-full.txt)
- [Agent mode](https://property.bot/?mode=agent)
- [index.md](https://property.bot/index.md)
- [about](https://property.bot/about)
- [privacy](https://property.bot/privacy)
- [API versioning](https://property.bot/docs/versioning.md)
- [GitHub](https://github.com/fourcolors/property-bot)