WINN.AI MCP API
A live remote Model Context Protocol endpoint serving WINN.AI conversation data to agents. It is published nowhere on the company's website — it was found by probing RFC 9728 OAuth protected-resource metadata on the product application host, which names https://app.winn.ai/mcp as the protected resource. Every anonymous JSON-RPC call, including initialize and tools/list, returns HTTP 401 {"error":"Missing credential"}, so the tool set is not public. Access is bearer-token-only via OAuth 2.0 authorization code with PKCE (S256), with dynamic client registration supported, and the sole advertised scope is read-only (sessions:read). Commercially this is the Enterprise-tier "API access" feature, reached through sales rather than signup.