sourcey
Submit

agents:SKILL.mdmcp.jsonopenapi.yml

← Replit

Can an agent create a deployment with Replit Publishing?

The agent needs you to handle changes to its access. You also decide once at Access. Interface found; job not yet run.

observedProbed revision sha256:fc1258924f92…

Who does each step

how grades work →

Whether the agent handles it alone or a person has to step in.

  1. 01

    Discover

    Machine

    The vendor's machine-readable docs show the agent where and how to call this job.

  2. 02

    Access

    Approval · setup

    You consent once to the agent's own client.

  3. 03

    Onboard

    Machine

    The agent can register itself with no person.

  4. 04

    Pay

    Not applicable

    Nothing to pay for the job.

  5. 05

    Confirm

    Machine

    The response or specification defines errors the agent can distinguish from success.

  6. 06

    Sustain

    Workaround · setup

    You replace or revoke the agent's access when it needs to change.

  • You, once, at Access: consenting to the agent's access.
  • Sustain: renewing, replacing or revoking its access.

To remove these handoffs: provide key management or OAuth refresh and revocation so the agent can maintain its own access.

Agent surfaces

2 kinds · 5 entries
OAuth
replit.com/oidc1 more
mcp.replit.com/server/mcp
Names the job's endpoint
For agents
mcp.replit.com2 more
replit.com/llms.txtdocs.replit.com/llms.txt
Names the job's endpoint

The probe

13 Oct 2026 · 08:43 UTC · 63.01 s

Each request it sent and what came back; the descriptors it read, counted, with what they named.

Discover32 descriptor reads7 facts
Found
OAuthreplit.com/oidcFor agentsreplit.com/llms.txtOAuthmcp.replit.com/server/mcpOAuthreplit.com/oidcOAuthreplit.com/oidcFor agentsdocs.replit.com/llms.txtFor agentsmcp.replit.com
From
replit.com/.well-known/oauth-authorization-server · replit.com/llms.txt · mcp.replit.com/.well-known/oauth-protected-resource/server/mcp · mcp.replit.com/.well-known/oauth-authorization-server · docs.replit.com/llms.txt · docs.replit.com/platforms/mcp-server
This endpoint
mcp.replit.com/server/mcp is named by a descriptor it read
Job requestsession openedPOST mcp.replit.com/server/mcp40141 ms
Request
POST https://mcp.replit.com/server/mcp
Response
401 · application/json · 24 bytes
Body
sha256:782eeaa7f1915f6783146f8180751785584f0f24bd4e503165c7fc4a597da600
Exchange
sha256:6e5a5e924f1baa7e95f6b865d24db967361239dbd8d94c7cf7fb095eb03d601f
Resource metadataGET mcp.replit.com/.well-known/oauth-protected-resource/server/mcp20082 ms
Request
GET https://mcp.replit.com/.well-known/oauth-protected-resource/server/mcp
Response
200 · application/json · 237 bytes
Body
sha256:9130330fbc6430e0e33b5695c7b5dc21dfabb1e4b93c6a60ccaf81c4e017c5df
Exchange
sha256:e7fb50c9ffdc4ed897ffce0e1d0e34272dedc1a2d2dd18ce754b498de98c5752
Authorization serverGET replit.com/.well-known/oauth-authorization-server/oidc20045 ms
Request
GET https://replit.com/.well-known/oauth-authorization-server/oidc
Response
200 · application/json · 769 bytes
Body
sha256:30698a43fc7484d8341da4f1b4a19c584ceb451341f3551641369f15ffd5a0c5
Exchange
sha256:567b2d6aaf00d981d05e6454eb774d73237b4ba3226db702f053a62c21d307cc
Client registrationPOST replit.com/oidc/reg20148 ms
Request
POST https://replit.com/oidc/reg
Response
201 · application/json · 668 bytes
Body
sha256:6bc8f2441740ee7d7792e4776ef5a26793e42b8b460804b323e475c93b3fffe5
Exchange
sha256:0265c8f20ca74eebe426b025a931a0966446e292614f17b8c37eaaed79c626f0
AuthorizationGET replit.com/oidc/auth?response_type=code&client_id=3f778cdf-988b-4816-8aae-85cd09d55c39&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=264f08355d9970d268ad4712dbe72c8d&code_challenge=Vv3AmYA0z2AnlHyF6xlb2F2AZPQdPdooDK3_qTY9Goo&code_challenge_method=S256&resource=https%3A%2F%2Fmcp.replit.com%2Fserver%2Fmcp&scope=apps%3Aread+apps%3Awrite+offline_access303627 ms
Request
GET https://replit.com/oidc/auth?response_type=code&client_id=3f778cdf-988b-4816-8aae-85cd09d55c39&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=264f08355d9970d268ad4712dbe72c8d&code_challenge=Vv3AmYA0z2AnlHyF6xlb2F2AZPQdPdooDK3_qTY9Goo&code_challenge_method=S256&resource=https%3A%2F%2Fmcp.replit.com%2Fserver%2Fmcp&scope=apps%3Aread+apps%3Awrite+offline_access
Response
303 · text/html · 0 bytes
Body
sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Exchange
sha256:d206454fef5004bb2ce397bd5f4e1b0e3987f3385237b6810f20bbe575db7ade
Declared pageGET replit.com/signup40327 ms
Request
GET https://replit.com/signup
Response
403 · text/html · 5429 bytes
Body
sha256:5b3a46b75bb7fc0c6f3247fd7dd20e87a986d44aff4726829f1c14f6584bbbcb
Exchange
sha256:f384600027d8085bdd517fea815c74b02824270a7f2ed39fb11c227007e92660

Replit on the startup-offers board

catalog record →

The grade’s badge

One image that keeps itself current, linking here.

Live badge for Replit Publishing, agent grade: B+[![agent grade](https://sourcey.com/badges/agent-readiness/arp_01m4t6w5qcgzctdgs35qq6yry4.svg)](https://sourcey.com/c/replit/agent-readiness/replit-publishing/deployment-create)

Improve the report

Correct it, probe it again, or improve the path.

Report outdated evidenceRequest reassessmentClaim this record
Profile
arp_01m4t6w5qcgzctdgs35qq6yry4
Projection
sha256:d3393c4c4a0410096597a8aa16f48ed8db37243805f6db2615fddb81e6a7ba6d
Policy
kind-2026-10-12.2 · sha256:b612172aad277b54461de84e006815126f2df566563954b02f4432a39cad89ac

A report or a reassessment request names this profile, its revision and its projection. How report cards are assessed →View the exact declaration