Olaris Authentication

generated: '2026-08-26'
method: searched
source: https://www.myolaris.com/llms.txt
docs: https://dev.wix.com/docs/develop-websites/articles/get-started/about-the-wix-site-mcp
scope: 'Olaris publishes no API and therefore no API authentication documentation.
  This file records the auth model of the ONE callable machine surface on a host Olaris
  controls — the Wix Site MCP endpoint at https://www.myolaris.com/_api/mcp — as stated
  in Olaris'' own llms.txt and as observed on a live anonymous probe. It is a platform-provided
  surface, not a first-party Olaris product API.'
schemes:
- name: none
  type: none
  applies_to: MCP session and read-only tools (tools/list, GetBusinessDetails, SearchInSite,
    SearchSiteApiDocs, BrowseWixRESTDocsMenu, ReadFullDocsArticle, ReadFullDocsMethodSchema)
  evidence: 'llms.txt states "No authentication required to connect to the MCP endpoint";
    an anonymous POST tools/list on 2026-08-26 returned HTTP 200 with the full nine-tool
    manifest.'
- name: wix-visitor-token
  type: bearer-like session token
  applies_to: CallWixSiteAPI and ExecuteWixAPI (both require a visitorToken parameter)
  issued_by_tool: GenerateVisitorToken
  evidence: 'The tools/list inputSchema marks visitorToken as required on CallWixSiteAPI
    and ExecuteWixAPI; llms.txt states GenerateVisitorToken "must be called before
    making any CallWixSiteAPI request if no visitor token is already available in
    context."'
  note: An anonymous visitor session, not an account credential. It authorizes actions
    on a visitor's behalf against public site data only.
oauth: false
api_keys: false
mtls: false
openid_connect: false
data_boundary: 'Only public site content is reachable. No patient, clinical, laboratory
  or myOLARIS-KTdx result data is exposed through this surface, and Olaris publishes
  no authenticated clinical or ordering API — test ordering runs through Labcorp''s
  existing physician portal, not an Olaris endpoint.'
x-evidence:
- url: https://www.myolaris.com/llms.txt
  status: 200
- url: https://www.myolaris.com/_api/mcp
  status: 200
- url: https://www.myolaris.com/.well-known/oauth-authorization-server
  status: 400
- url: https://www.myolaris.com/.well-known/openid-configuration
  status: 400