generated: '2026-09-07'
method: derived
source: mcp/adordiagnostics-mcp-tools-list.json
note: >-
  ADOR Diagnostics publishes no OpenAPI and no developer authentication documentation, so there are
  no securitySchemes to derive from. The only authenticated surface reachable at the adordx.com host
  is the Wix-provided site MCP endpoint, whose auth model is derived here from its live tools/list
  response and the anonymous GetBusinessDetails call made on 2026-09-07.
summary:
  types:
  - none
  - bearer-token
  api_key_in: []
  oauth2_flows: []
schemes:
- name: anonymous-mcp-connect
  type: none
  description: >-
    The MCP endpoint https://www.adordx.com/_api/mcp accepts an unauthenticated JSON-RPC tools/list
    and answers HTTP 200 with 9 tools. tools/call GetBusinessDetails also answers 200 anonymously.
    No credential is required to connect or to enumerate tools.
  sources:
  - mcp/adordiagnostics-mcp-tools-list.json
- name: visitor-token
  type: http
  scheme: bearer
  description: >-
    Tools that act on a visitor's behalf (CallWixSiteAPI, ExecuteWixAPI) require a visitorToken
    parameter. The token is minted anonymously by the GenerateVisitorToken tool - there is no
    signup, no API key issuance and no OAuth authorization step. Scope is limited to public site
    data and visitor-session actions on the Wix apps installed on the site (Blog, Bookings,
    Ecommerce, Pricing Plans).
  obtained_via: GenerateVisitorToken (MCP tool)
  sources:
  - mcp/adordiagnostics-mcp-tools-list.json
oauth:
  present: false
  evidence: >-
    /.well-known/oauth-authorization-server and /.well-known/oauth-protected-resource returned 400
    (HTML) on both www.adordx.com and adordx.com.