# WINN.AI

> WINN.AI is an AI revenue-execution platform for B2B sales teams. It joins live
> sales calls to deliver real-time playbook guidance (MEDDPICC, SPICED, BANT),
> live answers from a connected knowledge base, AI battle cards and in-call CRM
> visibility, then automates the follow-up: call summaries, follow-up emails,
> meeting prep, Slack updates and automated CRM field writes into Salesforce and
> HubSpot. The company is privately held and backed by Insight Partners.

This file was GENERATED by API Evangelist from probed evidence. WINN.AI does not
publish an llms.txt of its own (https://www.winn.ai/llms.txt returns HTTP 404).

## API surface — read this before trying to integrate

WINN.AI has an API, and it is real, but it is not a public developer API.

- There is **no developer portal, no API reference, no getting-started guide, no
  OpenAPI or Swagger document, no SDK on any package registry, and no CLI.**
  Probes for `/openapi.json`, `/openapi.yaml`, `/swagger.json`,
  `/v1/openapi.json`, `/api-docs`, `/redoc` and `/api-json` on both `www.winn.ai`
  and `app.winn.ai` returned 404, a single-page-app HTML shell, or a
  bearer-gated 401.
- API access is sold, not signed up for. The pricing page lists it as an
  **Enterprise-tier feature** — "API access: Get conversation data and AI
  insights, in any tool" — on a plan with a 20-seat minimum and no published
  price. Both tiers say "Talk to sales".

## Model Context Protocol (MCP)

WINN.AI runs a live remote MCP server. It is undocumented on the website and was
found only through OAuth protected-resource metadata.

- Endpoint: https://app.winn.ai/mcp (Streamable HTTP, JSON-RPC 2.0)
- Protected-resource metadata: https://app.winn.ai/.well-known/oauth-protected-resource
- Authorization server metadata: https://app.winn.ai/.well-known/oauth-authorization-server
- Auth: OAuth 2.0 authorization code + PKCE (S256), public client, dynamic client
  registration supported at https://app.winn.ai/api/auth/oauth/register
- Scope: `sessions:read` — read-only. No write scope is advertised.
- Anonymous `initialize` and `tools/list` both return HTTP 401
  `{"error":"Missing credential"}`, so the tool list and per-tool input schemas
  are not public. Do not guess them.

A second, separate MCP server runs on the marketing site's WordPress CMS at
https://winn.ai/wp-json/mcp/mcp-oauth-server (scope `mcp`). It exposes the
website, not the sales product, and should not be confused with the product API.

## Runtime semantics observed on the wire

- Rate limits are signalled on the MCP endpoint even on 401 responses:
  `x-ratelimit-limit-peruser: 60` and `x-ratelimit-limit-global: 600`, both over a
  60-second window, with `x-ratelimit-remaining-*` and `x-ratelimit-reset-*`
  (reset is seconds remaining, not a timestamp). No `Retry-After`.
- Two different error envelopes are served. MCP returns `{"error":"..."}`; the
  REST surface under `/api` returns
  `{"statusCode":401,"timestamp":"...","path":"...","message":"..."}`. Neither is
  RFC 9457 problem+json.
- The 401 does not carry a `WWW-Authenticate` header, so an MCP client cannot
  discover the authorization server from the challenge alone.
- Versioning is a URI path segment (`/api/v1/`). No version policy is published.

## What WINN.AI does not publish

No status page, no changelog or release notes, no deprecation or sunset policy,
no SLA, no security.txt, no A2A agent card, no webhooks or AsyncAPI, no Postman
collection, no public GitHub repositories, no sandbox or test environment.

## Security and compliance

- Trust center: https://trust.winn.ai/ (Vanta-hosted)
- Certifications: SOC 2, ISO/IEC 27001, GDPR
- Data Processing Addendum: https://winn.ai/dpa/
- SAML SSO with Okta is offered on the Enterprise plan for end-user login (not an
  API auth scheme).

## Links

- Website: https://www.winn.ai/
- Product application / sign in: https://app.winn.ai/
- Pricing: https://winn.ai/pricing/
- Support: https://winn.ai/support/ (support@winn.ai)
- Enterprise: https://winn.ai/enterprise/
- Book a demo: https://winn.ai/demo/
- Customers: https://winn.ai/customers/
- Press: https://winn.ai/press/
- Terms of Use: https://winn.ai/web-terms-and-conditions/
- Privacy Policy: https://winn.ai/privacy-policy/

## Integrations (from the product marketing, not from an API)

Salesforce, HubSpot, Zoom, Google Meet, Microsoft Teams, Slack.

---
Source: API Evangelist profile — https://github.com/api-evangelist/winnai
Generated 2026-08-13 from live probes. Nothing above is inferred from a document
WINN.AI does not serve.