# PromptEden
> Monitor your brand in AI answers. Compare competitors, inspect cited sources, and ask Eden to explain the evidence.

Content creation and publishing are private features for a fixed group of existing subscriber teams. New subscriptions and API scopes do not grant content access.

Monitored answer engines (present tense means live today): ChatGPT, AI Overviews, AI Mode, Gemini, Claude.

Important URLs:
- App: https://app.prompteden.com/
- Agent skill: https://app.prompteden.com/skill.md
- OpenAPI JSON: https://app.prompteden.com/openapi.json
- OpenAPI YAML: https://app.prompteden.com/docs/openapi.yaml
- Agent manifest: https://app.prompteden.com/agents.json
- OAuth protected resource metadata: https://app.prompteden.com/.well-known/oauth-protected-resource
- OAuth authorization server metadata: https://app.prompteden.com/.well-known/oauth-authorization-server
- Hosted MCP: https://app.prompteden.com/api/mcp

Existing-account delegated auth:
- Do not ask the human for their PromptEden password.
- Preferred API-key handoff: ask an owner/admin to open Workspace Settings > API Keys, create a scoped key for this agent, and paste the one-time pe_ key back.
- OAuth handoff: fetch /.well-known/oauth-authorization-server, construct an authorization-code + PKCE S256 URL for your registered public client, and ask the human to approve the scopes.
- The old /api/v1/agent/sign-in password path is compatibility-only and should not be used as a BYOA handoff for an existing human account.

Trust rules:
- The safety floor is never bypassed: prompt-injection defense, budget/credit ledger, and cross-tenant scoping.
- Write, spend, and publish operations use approvals or standing policies.
- For existing human accounts, use Workspace Settings > API Keys or OAuth. Do not request passwords.