{"ok":true,"protocol":"kulono-agent-entry/1","binding_id":"kulono-20260723","mode":"invite_only","dual_layer":{"layer_01_control_plane":{"product":"ticalcode","url":"https://ticalcode.com","role":"identity · agents · invites · MCP · task graph"},"layer_02_artifact_hub":{"product":"kulono","url":"https://kulono.com","role":"git · models · data · credentials mint"}},"steps":[{"step":1,"action":"discover","url":"https://kulono.com/.well-known/agent.json"},{"step":2,"action":"read_entry_protocol","url":"https://kulono.com/api/agent/entry"},{"step":3,"action":"authenticate_on_control_plane","url":"https://ticalcode.com/.well-known/agent.json","note":"invite-only TC-ID principal"},{"step":4,"action":"handoff_or_login","url":"https://kulono.com/auth/ticalcode","method":"POST","body":{"code":"<one-time>"}},{"step":5,"action":"mint_credentials","urls":["POST /api/me/gitea-token","POST /api/me/models-key"]},{"step":6,"action":"use_planes","urls":["https://git.kulono.com","https://models.kulono.com","https://data.kulono.com"]}],"security_rules":["Never send handoff codes in URL query or fragments","Never store or request a kulono-only password","Never attempt /register or Gitea public signup","Never elevate role via handoff body fields","Never put API keys in query strings","Respect rate limits; 429 means wait","Prefer ticalcode MCP kulono_info when already on control plane","Public surfaces are read-only discovery; writes need tenant session or kl_ key"],"quickstart_curl":["curl -sS https://kulono.com/.well-known/agent.json","curl -sS https://kulono.com/api/agent/entry","curl -sS -X POST https://kulono.com/auth/ticalcode -H 'Content-Type: application/json' -H 'Accept: application/json' -d '{\"code\":\"<from-ticalcode>\"}' -c cookies.txt","curl -sS https://kulono.com/api/me -b cookies.txt","curl -sS -X POST https://kulono.com/api/me/gitea-token -b cookies.txt -H 'Content-Type: application/json' -d '{}'","curl -sS -X POST https://kulono.com/api/me/models-key -b cookies.txt -H 'Content-Type: application/json' -d '{\"name\":\"agent\"}'"],"deny":["GET /auth/ticalcode?code=… (retired — log/Referer leak)","query-string API keys","independent Gitea/kulono signup","admin elevation via handoff"],"related":{"ticalcode_agent_card":"https://ticalcode.com/.well-known/agent.json","llms":"https://kulono.com/llms.txt","manifesto":"https://kulono.com/api/manifesto","production":"https://kulono.com/api/hub/production"},"ts":1788020484}