Inspect Sandbox through hosted MCP
Connect an OAuth-capable MCP client to https://mcp.headless.bid/mcp. The resource discovers oauth.sandbox.headless.bid through RFC 9728 and accepts only tokens issued for this exact MCP audience.
Try the Sandbox path
- 1
Open your Sandbox first
Complete Sandbox signup so the client can ask you to choose a real Workspace and Environment.
- 2
Add the hosted endpoint
Configure
https://mcp.headless.bid/mcpas a remote MCP server in a client that supports OAuth. - 3
Review consent in the browser
Sign in and approve only the displayed Sandbox, redirect origin and scopes.
- 4
Ask a useful first question
Try:
List the lots in my current headless.bid Sandbox, then show the live state of the first open lot.
OAuth client requirements
- Authorization Code with S256 PKCE.
- An HTTPS Client ID Metadata Document or an explicitly pre-registered client.
platform:read; addplatform:prepareonly to enumerateprepare_pause.- Exact resource indicator
https://mcp.headless.bid/mcp.
Dynamic Client Registration is intentionally unavailable. The authorization screen shows the client, Workspace, Environment, scopes and exact redirect origin before approval. Access tokens last five minutes; refresh grants last at most 24 hours and are rechecked against current Membership.
Tool surface
| Tool | Result | Authority |
|---|---|---|
workspace_context | Selected opaque Workspace and Environment | Read-only |
inventory_list | Bounded auction or Lot page | Read-only |
lot_snapshot | Sanitized authoritative Lot state | Read-only |
attention_list | Delivery attention metadata | Read-only |
evidence_list | Sealed-evidence metadata | Read-only |
prepare_pause | Expiring Web review link | Read-only handoff; Web + tenant approval required |
Data boundary
The MCP Worker has no database, R2, Queue, Durable Object, Engine or credential-custodian binding. It sends a bearer-free principal to a narrow Platform read service, which rechecks the live Workspace membership. Tool results reject secret, token, private-key, subject and bidder-identity fields and are capped at 256 KiB.