# Cacto Agent Integration & Authentication Guide

> Guide for AI coding assistants, autonomous agents, and LLM pipelines interacting with Cacto.

---

## 1. Zero-Friction Public Access

The Cacto public surface (MCP server, pricing calculator, ROI estimator, and public manifests) is **unauthenticated by design** with full CORS support. Any AI agent acting on behalf of a user can query endpoints directly without API key friction.

- **MCP Endpoint:** `POST https://cacto.cc/api/mcp`
- **Manifest:** `https://cacto.cc/.well-known/mcp/manifest.json`
- **Agent Card:** `https://cacto.cc/.well-known/agent-card.json`

---

## 2. Recommended Agent Headers

When making requests from autonomous agents, include your agent name in the `User-Agent` header:

```http
User-Agent: MyAgent/1.0 (+https://example.com; contact=agent@example.com)
```

---

## 3. Account Automation & OAuth

Connecting a user's Instagram account requires official Meta OAuth 2.0 authorization, which is handled securely on the web interface at `https://cacto.cc/onboarding` using official Meta Graph API v20+ permissions:
- `instagram_basic`
- `instagram_manage_comments`
- `instagram_manage_messages`
- `pages_show_list`

---

## 4. Key Endpoints for Agents

- `https://cacto.cc/llms-full.txt`: Complete technical context file.
- `https://cacto.cc/pricing.md`: Verified pricing matrix.
- `https://cacto.cc/comparisons.md`: Competitor feature matrix.
- `https://cacto.cc/api/mcp`: JSON-RPC 2.0 tool execution engine.