# Public discovery and authenticated administration — dcmcapital.fi

## Public access
No authentication is required for the public discovery endpoint https://dcmcapital.fi/mcp, its four read-only tools, the reviewed page summaries, the public company information or the published episode metadata.

- Agent guide: https://dcmcapital.fi/agents/
- MCP server card: https://dcmcapital.fi/.well-known/mcp/server-card.json
- Public company information: https://dcmcapital.fi/company.json
- Public content index: https://dcmcapital.fi/content-index.json
- Episodes API: https://dcmcapital.fi/wp-json/dcm/v1/episodes
- Sitemap index: https://dcmcapital.fi/sitemap_index.xml
- Reviewed page summaries: https://dcmcapital.fi/llms-full.txt

Public MCP supports Streamable HTTP with JSON responses and protocol versions 2025-11-25, 2025-06-18 and 2025-03-26. POST JSON-RPC messages to /mcp. GET returns 405 because standalone SSE is not supported. Accepted notifications receive an empty 202 response. Requests are limited to 64 KiB. An Origin header, when present, must be on the server's explicit allowlist. Server-side clients may omit Origin.

Use search_content, read_content, get_company and get_catalogue_status. Returned summaries link to their public sources. The server does not send messages, submit forms, fetch arbitrary URLs, execute code or edit content. It excludes private drafts, password-protected and noindex episodes. Episode text is limited to public excerpts or SEO descriptions; it does not expose members-only video or transcript content.

## Separate site administration
WordPress administration at /wp-admin/ and the existing MCP Adapter at /wp-json/mcp/mcp-adapter-default-server require WordPress authentication and the appropriate capabilities. They are for the site owner's authorized tools. Public discovery access does not grant access to administration. No public OAuth flow or new credentials are offered by this plugin.

## Related Neuvottelija server
https://www.neuvottelija.fi/mcp serves public Neuvottelija transcripts, guest profiles and articles. It is a separate read-only service. Its presence does not grant access to paid Insider content.

## Usage and attribution
The existing content-use preferences remain in robots.txt. Cite the source URLs returned by the tools, honor Cache-Control, and keep concurrency to four requests or fewer. Public contact details: sami.miettinen@dcmcapital.fi, +358 400 735 835. Operator: DCM Capital Oy, Kalevankatu 54 C 27, 00180 Helsinki, Finland.
