ZZD public AI gateway · zzd_public_ai_gateway_v2
Resource: 11 · Agent capability contract / MCP 边界
Canonical map: https://zzd.show/docs/ai/map.json
Full handbook: https://zzd.show/llms-full.txt

# ZZD external-agent capability contract

Capability maturity must remain explicit.

## Available now

- this public, unauthenticated, read-only resource gateway;
- signed-in browser use of the normal Web AI IDE and product UI;
- Show runtime APIs such as `AppRuntime` and `SpaceClient` inside an
  appropriately bound Show.

## Not advertised as available

There is no public unauthenticated mutation endpoint and this page is
not a remote MCP JSON-RPC transport. Do not call proposed tool names
unless capability discovery from a future authenticated ZZD server
explicitly returns them.

## Stable resource names for MCP-compatible ingestion

- `zzd://platform/overview`
- `zzd://shows/schema`
- `zzd://shows/lifecycle`
- `zzd://shows/quality-standard`
- `zzd://assets/guide`
- `zzd://baas/guide`
- `zzd://sales/guide`
- `zzd://safety`

## Proposed future scoped tools

- `zzd.auth.status`
- `zzd.shows.list`, `zzd.shows.get`, `zzd.shows.create`
- `zzd.shows.update_metadata`, `zzd.shows.replace_pieces`
- `zzd.shows.validate`, `zzd.shows.publish`,
  `zzd.shows.unpublish`
- `zzd.assets.upload`, `zzd.assets.upload_from_url`,
  `zzd.assets.bind`
- `zzd.baas.get_context`, `zzd.baas.configure`
- `zzd.sales.create_draft`, `zzd.sales.submit`,
  `zzd.sales.status`

Any native implementation should expose narrow, typed operations;
owner/resource scopes; expiry and revocation; idempotency keys for
mutations; dry-run and diff where useful; audit logs; structured
errors; and confirmation hints. It must rebuild raw Piece source
safely, enforce access on every read, restrict asset bindings to
owned Shows, protect upload-from-URL against SSRF, and avoid generic
shell/SQL/internal lifecycle tools.