# Chengdu, by Soul

> One-to-three flexible Chengdu exploration days, with exact review and a saved page.

## Entry points

- Tourist planner: /
- Agent search display: /agents
- Stateless MCP: POST /mcp (verified visitor identity required for writes)
- Agent contract: /agent-description.md
- Privacy and feedback: /privacy

## Public tools

Call tools/list first; use only the live server's advertised capabilities.
The search-enabled contract has six tools: list_chengdu_scenes,
search_chengdu_scenes, get_chengdu_scene, propose_chengdu_itinerary,
revise_chengdu_draft and confirm_chengdu_draft.
Search uses English/Chinese names or short keywords, not arbitrary natural
language. All recognized terms and filters must match. Unsupported/unknown
constraints return no results and require clarification, not silent relaxation.
Fetch details with the returned ID and catalogVersion. Pass a chosen detail's
selection as sceneSelection in a proposal to require those scenes; other slots
may contain recommendations. Required choices exceeding pace/day capacity fail.
Proposal requires dayCount (1–3), rhythm, discovery, atmosphere and a retry key.
Review the returned draft and warnings. The bounded adjustment excludes a
returned scene. Confirm only its exact latest revision and hash after review.
Only confirmation returns a durable, unlisted page URL. Shared links expire
seven days after draft creation and can be revoked by their owner.

## Limits

Search, catalog and details need no credential. Public discovery pages are
available for indexing only when enabled by the operator; this does not claim
search-engine inclusion. The independent Node deployment is a controlled single-account test, not public
visitor login. Approved Agent clients use a separately issued, expiring and
revocable `/mcp` bearer credential; never send provider API keys or browser cookies.
Structured JSON outputs support Python/JavaScript clients without browser control.
Manual credentials are not general MCP OAuth auto-authorization.
On the Sites deployment, authenticated access uses the platform-managed identity.

The public_overview catalog contains real scene identities and brief editorial
overviews, not fixture places or formally verified timed routes. Day groups do
not verify transfer duration, current opening, reservations or accessibility.
Travelers must check these with the venue. Do not send full chat history,
passport/payment data, unrelated profile information or unsupported constraints.
Do not invent destinations or enrich returned facts on the service's behalf.
No hotel booking, checkout or payment is offered in this release.