# Autoura

> Autoura is a UK digital experience platform (DXP) for real-world tourism. It structures and
> maintains experience data — venues, attractions, tours, routes, stops, accessibility and
> hospitality signals, AI guides and storytelling — so that AI systems can understand and act on it.
> Autoura's primary integration surface for agents is a hosted MCP server; its REST API serves
> routes, stops, visits, characters, MoveMe audio and a consent-brokered consumer preference graph.
> PlanMyVisit is Autoura's consumer visit-planning product on the same MCP endpoint.

method: generated

This file is GENERATED by API Evangelist from Autoura's own public artifacts. Autoura does not
publish an llms.txt at https://www.autoura.com/llms.txt — that path returns HTTP 200 with the
site's SPA shell, not a text document (see llms/autoura-llms-probe.yml). Autoura DOES publish a
real llms.txt for its consumer brand at https://www.planmyvisit.to/llms.txt, and publishes agent
skills at /core/pai/skill.md, advertised with a <link rel="ai-skill"> element in its homepage head.

## Agent surfaces (provider-published)

- [Autoura agent skill](https://www.autoura.com/core/pai/skill.md): the B2B operating guide — what
  Autoura is, when to hand off to PlanMyVisit, authentication, the strategy/execution document split,
  the PAI identity model, tasks, and entity definitions with ID prefixes.
- [PlanMyVisit agent guide](https://www.planmyvisit.to/skill.md): the consumer operating guide —
  authenticate, discover tools, find or resume one shared visit plan, load preferences, resolve the
  venue, create/refine/resume.
- [PlanMyVisit tool reference](https://www.planmyvisit.to/docs/ai/tools.md): the provider's selected
  MCP tool descriptions. Autoura instructs agents NOT to hard-code tool names and to call tools/list
  at the start of every session.
- [PlanMyVisit llms.txt](https://www.planmyvisit.to/llms.txt): the consumer brand's own llms.txt.
- [MCP endpoint](https://api.autoura.com/api/mcp): hosted remote MCP server. OAuth 2.1 + PKCE +
  dynamic client registration, or a documented email-code bearer token. Anonymous tools/list returns
  401 with an RFC 9728 challenge.
- [WebMCP](https://www.planmyvisit.to/webmcp): the same tool set exposed in-page on PlanMyVisit,
  authenticated by the website session.

## Discovery documents

- [OAuth protected resource](https://api.autoura.com/api/.well-known/oauth-protected-resource): RFC 9728.
- [OAuth authorization server](https://api.autoura.com/.well-known/oauth-authorization-server): RFC 8414.
- [OpenID configuration](https://api.autoura.com/api/auth/.well-known/openid-configuration): the richest
  of the three — adds refresh_token, offline_access and RS256 id-token signing.

## APIs

- [Autoura Experience API](https://www.autoura.com/docs/api): REST over
  https://api.autoura.com/api. Bearer API key. Routes, stops, visits, characters, MoveMe audio,
  entities, consumer preference brokering. No OpenAPI is published.
- [Authentication](https://www.autoura.com/docs/api/authentication): Authorization: Bearer <key>.
  A public test key is published for evaluation; verify with /api/whoami, the one uncached endpoint.
- [Important concepts](https://www.autoura.com/docs/api/concepts): the success/error_title/error_body
  envelope, the technical-vs-business failure split, lang, date and number formats, Fastly caching.
- [Changelog](https://www.autoura.com/docs/api/changelog): dated, 2022-10-15 to 2026-07-30. Autoura
  states it does not version its APIs; this is the only record of change.
- [Food & cuisines](https://www.autoura.com/docs/api/cuisines): the dietary vocabulary, including
  religious and medical diets keyed on IATA airline special-meal codes.
- [Profiles & DIDs](https://www.autoura.com/docs/api/profiles): consumer preferences and location,
  addressed by DID, with DIDComm v2 messaging.
- [Integrations](https://www.autoura.com/docs/api/integrations): booking widget, route and character
  QR codes, website sign-in, new-profile API.

## Machine-readable artifacts (API Evangelist)

- [apis.yml](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/apis.yml)
- [MCP manifest](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/mcp/autoura-mcp.yml)
- [MCP / REST tool crosswalk](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/mcp/autoura-tool-crosswalk.yml)
- [Authentication](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/authentication/autoura-authentication.yml)
- [OAuth scopes](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/scopes/autoura-scopes.yml)
- [Conventions](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/conventions/autoura-conventions.yml)
- [Error catalog](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/errors/autoura-problem-types.yml)
- [Lifecycle](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/lifecycle/autoura-lifecycle.yml)
- [Changelog](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/changelog/autoura-changelog.yml)
- [Conformance](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/conformance/autoura-conformance.yml)
- [Data model](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/data-model/autoura-data-model.yml)
- [Webhooks](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/asyncapi/autoura-webhooks.yml)
- [Sandbox](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/sandbox/autoura-sandbox.yml)
- [Components](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/components/autoura-components.yml)
- [Plans & pricing](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/plans/autoura-plans-pricing.yml)
- [Rate limits](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/rate-limits/autoura-rate-limits.yml)
- [Well-known probe](https://raw.githubusercontent.com/api-evangelist/autoura/refs/heads/main/well-known/autoura-well-known.yml)

## Commercial

- [Pricing](https://www.autoura.com/pricing): Starter 30 USD/mo, Scale 125 USD/mo, Enterprise
  250 USD/mo. Priced on content objects and new consumer profiles, not API calls. Merchant of
  record is Creem.io.
- [Terms](https://www.autoura.com/legal/terms)
- [Privacy](https://www.autoura.com/legal/privacy)
- [Contact](https://www.autoura.com/contact): devhelp@autoura.com for API integration help;
  brands@, designers@, suppliers@, hello@; sahra@autoura.com reaches Autoura's own AI assistant.

## Notes for agents

- There is no OpenAPI, no GraphQL, no AsyncAPI and no A2A agent card. The machine-readable contract
  is the MCP tool set, and it is auth-gated.
- There is no idempotency key and no dry-run mode. Retrying a create after a dropped response will
  create a second object. Autoura's guidance is behavioural: check for an existing object first.
- There is no published rate limit and no rate-limit header, so there is no runtime budget signal.
- The API is unversioned and the changelog records field removals and renames. Read it before you
  depend on a field.
- Autoura tells agents never to fabricate venue facts and to file a content_gap_report instead.