generated: '2026-08-05'
method: derived
source: mcp/vestaron-mcp.yml + openapi/vestaron-content-openapi.yml
status: gated
status_raw: unmappable-gated
note: >-
  Vestaron serves both an MCP endpoint and (via the WordPress REST route index) a public REST
  content surface, so the crosswalk is emitted — but MCP tools/list returns HTTP 401
  mcp_unauthorized and the backing wp-abilities/v1 registry returns 401 rest_forbidden, so no
  tool name is publicly observable. The crosswalk therefore records ZERO mapped rows rather than
  guessing at WordPress MCP Adapter defaults. rest_only[] below is the real, complete public
  REST surface that currently has no observable agent tool bound to it.
surfaces:
  openapi:
    file: openapi/vestaron-content-openapi.yml
    base_url: https://vestaron.com/wp-json/wp/v2
    gated: false
    note: >-
      Anonymous read on posts, pages, media, categories, tags, comments, search and the
      discovery collections; /wp/v2/users and /wp/v2/settings return 401 anonymously, and all
      write operations require authentication. Derived by API Evangelist from
      https://vestaron.com/wp-json/ — not published by Vestaron.
  mcp:
    url: https://vestaron.com/wp-json/mcp/mcp-oauth-server
    gated: true
    note: >-
      tools/list -> 401 mcp_unauthorized; /wp-json/mcp/mcp-adapter-default-server -> 401
      rest_forbidden. OAuth 2.1 + PKCE, scope "mcp" (RFC 8414 / RFC 9728 metadata is anonymous).
  graphql:
    present: false
    note: no /graphql route in any of the 13 registered WordPress REST namespaces
crosswalk: []
mcp_only: []
rest_only:
- capability: Newsroom posts (94 published across News 64, Articles 16, Recognitions 13,
    Video/Podcasts 5)
  operations: [getPosts, getPostsById, getPostsByParentRevisions, getPostsByParentRevisionsById]
- capability: Product and company pages (34 published — product pages for SPEAR LEP/RC/T,
    BASIN FLEX and LEPROTEC, plus About Us, Science, Sustainability, Resources, Contact and the
    per-jurisdiction legal pages)
  operations: [getPages, getPagesById, getPagesByParentRevisions, getPagesByParentRevisionsById]
- capability: Media library (829 attachments — logos, product imagery, labels and downloads)
  operations: [getMedia, getMediaById]
- capability: Core taxonomy (4 categories, 9 year tags)
  operations: [getCategories, getCategoriesById, getTags, getTagsById]
- capability: Site search (128 indexed objects)
  operations: [getSearch]
- capability: Comments (0 published — commenting is closed site-wide)
  operations: [getComments, getCommentsById]
- capability: Discovery
  operations: [getRoot, getTypes, getTypesByType, getTaxonomies, getTaxonomiesByTaxonomy,
    getStatuses, getStatusesByStatus]
- capability: Authors and settings (401 to anonymous callers)
  operations: [getUsers, getUsersById, getUsersMe, getSettings]
coverage:
  tools_named: 0
  tools_bound: 0
  mcp_only: 0
  rest_operations_total: 89
  rest_read_operations: 35
  rest_operations_with_tool: 0
  reason: mcp tools/list authentication-gated