-
+
Start building free
diff --git a/web/app/well-known/api-catalog/route.ts b/web/app/well-known/api-catalog/route.ts
new file mode 100644
index 0000000..e199599
--- /dev/null
+++ b/web/app/well-known/api-catalog/route.ts
@@ -0,0 +1,14 @@
+import { getApiCatalog } from '../../../lib/agent-discovery';
+
+// RFC 9727 API catalog, served at /.well-known/api-catalog via the rewrite in
+// next.config.mjs.
+export const revalidate = 86400;
+
+export function GET() {
+ return new Response(JSON.stringify(getApiCatalog(), null, 2), {
+ headers: {
+ 'Content-Type': 'application/linkset+json',
+ 'Cache-Control': 'public, max-age=86400',
+ },
+ });
+}
diff --git a/web/app/well-known/mcp.json/route.ts b/web/app/well-known/mcp.json/route.ts
new file mode 100644
index 0000000..57bfa7a
--- /dev/null
+++ b/web/app/well-known/mcp.json/route.ts
@@ -0,0 +1,14 @@
+import { getMcpManifest } from '../../../lib/agent-discovery';
+
+// MCP server manifest, served at /.well-known/mcp.json via the rewrite in
+// next.config.mjs.
+export const revalidate = 86400;
+
+export function GET() {
+ return new Response(JSON.stringify(getMcpManifest(), null, 2), {
+ headers: {
+ 'Content-Type': 'application/json; charset=utf-8',
+ 'Cache-Control': 'public, max-age=86400',
+ },
+ });
+}
diff --git a/web/app/well-known/security.txt/route.ts b/web/app/well-known/security.txt/route.ts
new file mode 100644
index 0000000..5ded7df
--- /dev/null
+++ b/web/app/well-known/security.txt/route.ts
@@ -0,0 +1,18 @@
+import { getSecurityTxt } from '../../../lib/agent-discovery';
+
+// Served at /.well-known/security.txt via the rewrite in next.config.mjs — the
+// App Router skips dot-prefixed directories, so the route lives at
+// /well-known/ and the canonical path rewrites onto it.
+//
+// ISR rather than force-static so the Expires field rolls forward instead of
+// freezing at build time.
+export const revalidate = 86400;
+
+export function GET() {
+ return new Response(getSecurityTxt(new Date()), {
+ headers: {
+ 'Content-Type': 'text/plain; charset=utf-8',
+ 'Cache-Control': 'public, max-age=86400',
+ },
+ });
+}
diff --git a/web/components/home/A2AFeature.tsx b/web/components/home/A2AFeature.tsx
index 2320ef1..e3665b4 100644
--- a/web/components/home/A2AFeature.tsx
+++ b/web/components/home/A2AFeature.tsx
@@ -30,7 +30,7 @@ const AGENT_CARD_TOKENS: ReadonlyArray<{ text: string; kind?: TokenKind }> = [
{ text: ',\n ' },
{ text: '"url"', kind: 'var' },
{ text: ': ' },
- { text: '"https://relay.dev/a2a/scout"', kind: 'str' },
+ { text: '"https://cast.agentrelay.com/a2a/scout"', kind: 'str' },
{ text: ',\n ' },
{ text: '"capabilities"', kind: 'var' },
{ text: ': { ' },
diff --git a/web/components/home/ContextCapabilities.tsx b/web/components/home/ContextCapabilities.tsx
index 46379e1..6178071 100644
--- a/web/components/home/ContextCapabilities.tsx
+++ b/web/components/home/ContextCapabilities.tsx
@@ -4,10 +4,13 @@ import { SearchPreviewAnimation } from '../../app/SearchPreviewAnimation';
import s from '../../app/landing.module.css';
import { WaveDivider } from './icons';
-const WEBHOOK_SNIPPET = `curl -X POST \\
- https://api.agentrelay.com/v1/webhooks \\
+// relay.webhooks.createInbound() mints the URL and token per webhook, so there
+// is no fixed path to show here — the payload shape and bearer auth are what
+// the snippet is illustrating. See content/docs/webhooks.mdx.
+const WEBHOOK_SNIPPET = `curl -X POST "$RELAY_INBOUND_WEBHOOK_URL" \\
+ -H "Authorization: Bearer $RELAY_WEBHOOK_TOKEN" \\
-H "Content-Type: application/json" \\
- -d '{"channel":"#alerts","text":"Deploy finished"}'`;
+ -d '{"message":"Deploy finished","author":"github-actions[bot]"}'`;
/**
* The "build the right context" band: real-time events, webhooks, and search.
diff --git a/web/content/docs/file/cli.mdx b/web/content/docs/file/cli.mdx
index 6104b5b..331b64f 100644
--- a/web/content/docs/file/cli.mdx
+++ b/web/content/docs/file/cli.mdx
@@ -17,7 +17,7 @@ The CLI resolves a token in priority order, first match wins:
For the cloud-hosted path, login is owned by the `agent-relay` CLI: `agent-relay login`, then `agent-relay workspace switch
`, then any `relayfile` command. For self-hosted servers, use the API-key path:
```bash
-relayfile login --api-key --server https://api.relayfile.dev
+relayfile login --api-key --server https://file.agentrelay.com
```
If no token is found, the CLI prints: `Error: not authenticated. Run 'agent-relay login' for Cloud or set RELAYFILE_TOKEN.`
@@ -49,7 +49,7 @@ Authenticate through the canonical relay session, or the self-hosted API-key pat
```bash
relayfile login [--no-open]
-relayfile login --api-key --server https://api.relayfile.dev
+relayfile login --api-key --server https://file.agentrelay.com
```
The default path delegates to `agent-relay login`. `--api-key` keeps the self-hosted compatibility path and writes `~/.relayfile/credentials.json` with `0600` permissions.
diff --git a/web/content/docs/file/introduction.mdx b/web/content/docs/file/introduction.mdx
index 287590e..7d50dcc 100644
--- a/web/content/docs/file/introduction.mdx
+++ b/web/content/docs/file/introduction.mdx
@@ -52,7 +52,7 @@ from relayfile import RelayFileClient
# The Python SDK is the data-plane client — connect a provider with the CLI
# above, then point the client at the workspace token to read and write:
client = RelayFileClient(
- "https://api.relayfile.dev",
+ "https://file.agentrelay.com",
lambda: os.environ["RELAYFILE_TOKEN"],
)
```
diff --git a/web/content/docs/file/python-sdk.mdx b/web/content/docs/file/python-sdk.mdx
index 13495a6..4695c9e 100644
--- a/web/content/docs/file/python-sdk.mdx
+++ b/web/content/docs/file/python-sdk.mdx
@@ -19,7 +19,7 @@ Construct a client with a base URL and a token (a string, or a callable that ret
from relayfile import RelayFileClient
client = RelayFileClient(
- "https://api.relayfile.dev",
+ "https://file.agentrelay.com",
lambda: os.environ["RELAYFILE_TOKEN"],
)
```
@@ -63,7 +63,7 @@ except RevisionConflictError:
```python
from relayfile import AsyncRelayFileClient
-async with AsyncRelayFileClient("https://api.relayfile.dev", token) as client:
+async with AsyncRelayFileClient("https://file.agentrelay.com", token) as client:
page = await client.read_file("rw_123", "/linear/issues/AGE-12__fix-login-bug.json")
```
diff --git a/web/content/docs/loop/sources.mdx b/web/content/docs/loop/sources.mdx
index bc96f1d..fd626b4 100644
--- a/web/content/docs/loop/sources.mdx
+++ b/web/content/docs/loop/sources.mdx
@@ -13,7 +13,7 @@ Relayloop's value comes from aggregating history that is otherwise scattered acr
| Codex CLI | `codex` | `~/.codex/history.jsonl` |
| Cursor | `cursor` | Per-session JSONL under `~/.cursor/projects/...` |
| Grok | `grok` | Per-session JSONL under `~/.grok/sessions/...` |
-| Agent Relay | `relay` | Relaycast API (`https://api.relaycast.dev/v1`) |
+| Agent Relay | `relay` | Relaycast API (`https://cast.agentrelay.com/v1`) |
| Trajectories | `trajectory` | Compacted per-run JSON files |
| OpenCode | `opencode` | Local SQLite (`~/.local/share/opencode/opencode.db`) |
diff --git a/web/content/docs/observer.mdx b/web/content/docs/observer.mdx
index 80db7e9..2ebc73a 100644
--- a/web/content/docs/observer.mdx
+++ b/web/content/docs/observer.mdx
@@ -74,7 +74,7 @@ Point the command at a different observer deployment with `--observer-url`, or
set `RELAY_OBSERVER_URL`:
```bash
-agent-relay observer --observer-url https://observer.relaycast.dev
+agent-relay observer --observer-url https://observer.agentrelay.com
```
## When to use it
diff --git a/web/lib/agent-discovery.ts b/web/lib/agent-discovery.ts
new file mode 100644
index 0000000..1a0c963
--- /dev/null
+++ b/web/lib/agent-discovery.ts
@@ -0,0 +1,143 @@
+// Machine-readable discovery documents served under /.well-known/.
+//
+// Agents that land on agentrelay.com without prior knowledge use these to find
+// the security contact, the HTTP APIs behind the product, and the MCP server
+// that exposes Relay as tools. Everything here points at surfaces that already
+// exist — the docs pages and the published OpenAPI specs — so the manifests
+// stay true without a separate source of truth to keep in sync.
+
+import { SITE_EMAIL, SITE_URL, absoluteUrl } from './site';
+
+const RELAYCAST_OPENAPI_URL =
+ 'https://raw.githubusercontent.com/AgentWorkforce/relaycast/main/openapi.yaml';
+const RELAYFILE_OPENAPI_URL =
+ 'https://raw.githubusercontent.com/AgentWorkforce/relayfile/main/openapi/relayfile-v1.openapi.yaml';
+
+/** RFC 9116 requires an absolute, machine-parseable expiry no more than a year out. */
+export function securityTxtExpiry(now: Date): string {
+ const expires = new Date(now);
+ expires.setUTCFullYear(expires.getUTCFullYear() + 1);
+ expires.setUTCMilliseconds(0);
+ return expires.toISOString().replace('.000Z', 'Z');
+}
+
+/** RFC 9116 security.txt. */
+export function getSecurityTxt(now: Date): string {
+ return [
+ '# Agent Relay security contact (RFC 9116).',
+ '# Report a vulnerability by email; we acknowledge within two business days.',
+ '',
+ `Contact: mailto:${SITE_EMAIL}`,
+ `Expires: ${securityTxtExpiry(now)}`,
+ 'Preferred-Languages: en',
+ `Canonical: ${absoluteUrl('/.well-known/security.txt')}`,
+ `Policy: ${absoluteUrl('/terms')}`,
+ '',
+ ].join('\n');
+}
+
+type LinksetLink = { href: string; type: string; title: string };
+
+type LinksetEntry = {
+ anchor: string;
+ 'service-desc'?: LinksetLink[];
+ 'service-doc'?: LinksetLink[];
+ 'service-meta'?: LinksetLink[];
+};
+
+/**
+ * RFC 9727 API catalog: one linkset entry per HTTP API, each pointing at its
+ * OpenAPI description (`service-desc`) and its human documentation
+ * (`service-doc`).
+ */
+export function getApiCatalog(): { linkset: LinksetEntry[] } {
+ return {
+ linkset: [
+ {
+ anchor: 'https://cast.agentrelay.com/v1',
+ 'service-desc': [
+ {
+ href: RELAYCAST_OPENAPI_URL,
+ type: 'application/yaml',
+ title: 'Relaycast v1 OpenAPI 3.0 description',
+ },
+ ],
+ 'service-doc': [
+ {
+ href: absoluteUrl('/docs/relaycast-api'),
+ type: 'text/html',
+ title: 'Relaycast API reference',
+ },
+ {
+ href: absoluteUrl('/docs/markdown/relaycast-api.md'),
+ type: 'text/markdown',
+ title: 'Relaycast API reference (markdown)',
+ },
+ ],
+ 'service-meta': [
+ {
+ href: absoluteUrl('/docs/authentication'),
+ type: 'text/html',
+ title: 'Authentication: token types and scopes',
+ },
+ ],
+ },
+ {
+ anchor: 'https://file.agentrelay.com/v1',
+ 'service-desc': [
+ {
+ href: RELAYFILE_OPENAPI_URL,
+ type: 'application/yaml',
+ title: 'Relayfile v1 OpenAPI description',
+ },
+ ],
+ 'service-doc': [
+ {
+ href: absoluteUrl('/docs/file/api-reference'),
+ type: 'text/html',
+ title: 'Relayfile API reference',
+ },
+ ],
+ },
+ ],
+ };
+}
+
+/**
+ * MCP server manifest. `agent-relay mcp` is a stdio server shipped in the CLI,
+ * so the manifest describes how to launch it rather than a remote URL.
+ */
+export function getMcpManifest() {
+ return {
+ name: 'agent-relay',
+ description:
+ 'Agent Relay messaging as MCP tools: channels, DMs, threads, reactions, inbox, and Zod-backed actions.',
+ documentation: absoluteUrl('/docs/agent-relay-mcp'),
+ website: SITE_URL,
+ servers: [
+ {
+ name: 'agent-relay',
+ transport: 'stdio',
+ command: 'agent-relay',
+ args: ['mcp'],
+ install: {
+ registry: 'npm',
+ package: 'agent-relay',
+ command: 'npm install -g agent-relay',
+ },
+ env: [
+ {
+ name: 'RELAY_WORKSPACE_KEY',
+ description: 'Workspace join secret (rk_live_*). Create one with `agent-relay workspace create`.',
+ required: true,
+ },
+ {
+ name: 'RELAY_BASE_URL',
+ description: 'API base URL override, for self-hosted @relaycast/engine deployments.',
+ required: false,
+ },
+ ],
+ },
+ ],
+ };
+}
diff --git a/web/lib/test/agent-discovery.test.ts b/web/lib/test/agent-discovery.test.ts
new file mode 100644
index 0000000..89c4771
--- /dev/null
+++ b/web/lib/test/agent-discovery.test.ts
@@ -0,0 +1,49 @@
+import { describe, expect, it } from 'vitest';
+
+import { getApiCatalog, getMcpManifest, getSecurityTxt, securityTxtExpiry } from '../agent-discovery';
+
+describe('security.txt', () => {
+ it('carries the RFC 9116 required fields', () => {
+ const txt = getSecurityTxt(new Date('2026-08-21T00:00:00Z'));
+
+ expect(txt).toContain('Contact: mailto:hello@agentrelay.com');
+ expect(txt).toContain('Expires: 2027-08-21T00:00:00Z');
+ expect(txt).toContain('Canonical: https://agentrelay.com/.well-known/security.txt');
+ expect(txt).toContain('Preferred-Languages: en');
+ });
+
+ it('always expires in the future', () => {
+ const now = new Date('2026-08-21T00:00:00Z');
+ expect(Date.parse(securityTxtExpiry(now))).toBeGreaterThan(now.getTime());
+ });
+});
+
+describe('api-catalog', () => {
+ it('links each API to an OpenAPI description and human docs', () => {
+ const { linkset } = getApiCatalog();
+
+ // Anchors must be API hosts that actually exist — api.agentrelay.com does not.
+ expect(linkset.map((e) => e.anchor)).toEqual([
+ 'https://cast.agentrelay.com/v1',
+ 'https://file.agentrelay.com/v1',
+ ]);
+ for (const entry of linkset) {
+ expect(entry.anchor).toMatch(/^https:\/\//);
+ expect(entry['service-desc']?.[0]?.href).toMatch(/^https:\/\//);
+ expect(entry['service-doc']?.[0]?.href).toMatch(/^https:\/\/agentrelay\.com\//);
+ }
+ });
+});
+
+describe('mcp.json', () => {
+ it('describes the stdio server well enough to launch it', () => {
+ const manifest = getMcpManifest();
+ const [server] = manifest.servers;
+
+ expect(manifest.documentation).toBe('https://agentrelay.com/docs/agent-relay-mcp');
+ expect(server.transport).toBe('stdio');
+ expect(server.command).toBe('agent-relay');
+ expect(server.args).toEqual(['mcp']);
+ expect(server.env.find((e) => e.name === 'RELAY_WORKSPACE_KEY')?.required).toBe(true);
+ });
+});
diff --git a/web/next.config.mjs b/web/next.config.mjs
index 08fe1c1..fdf4431 100644
--- a/web/next.config.mjs
+++ b/web/next.config.mjs
@@ -31,11 +31,59 @@ const nextConfig = {
return config;
},
+ async headers() {
+ // Machine-readable surfaces an agent may fetch from another origin (or from
+ // a browser-based agent). Without CORS these are unreadable to anything that
+ // isn't a server-side crawler.
+ const agentReadable = [
+ '/llms.txt',
+ '/llms-full.txt',
+ '/llm.txt',
+ '/agents.md',
+ '/skill.md',
+ '/feed.xml',
+ '/sitemap.xml',
+ '/robots.txt',
+ '/docs/llms.txt',
+ '/docs/markdown.md',
+ '/docs/markdown/:path*',
+ '/docs/agents/markdown/:path*',
+ '/docs/factory/markdown/:path*',
+ '/docs/file/markdown/:path*',
+ '/docs/loop/markdown/:path*',
+ '/docs/:slug([^/]+\\.md)',
+ '/.well-known/:path*',
+ ];
+
+ return [
+ {
+ source: '/:path*',
+ headers: [{ key: 'X-Content-Type-Options', value: 'nosniff' }],
+ },
+ ...agentReadable.map((source) => ({
+ source,
+ headers: [
+ { key: 'Access-Control-Allow-Origin', value: '*' },
+ { key: 'Access-Control-Allow-Methods', value: 'GET, HEAD' },
+ ],
+ })),
+ {
+ // The internal path the /.well-known rewrite targets; keep it out of
+ // indexes so the canonical dot-prefixed URL is the only one advertised.
+ source: '/well-known/:path*',
+ headers: [{ key: 'X-Robots-Tag', value: 'noindex' }],
+ },
+ ];
+ },
async rewrites() {
return {
afterFiles: [
// Conventional llms.txt path under /docs resolves to the root route.
{ source: '/docs/llms.txt', destination: '/llms.txt' },
+ // The App Router skips dot-prefixed directories, so the /.well-known
+ // documents are implemented under app/well-known/ and surfaced here at
+ // their canonical paths.
+ { source: '/.well-known/:path*', destination: '/well-known/:path*' },
// Append .md to any docs URL to get its markdown mirror. afterFiles
// runs after static routes (so /docs/markdown.md is untouched) but
// before the /docs/[slug] dynamic page.