Sphere wins 2026 Global Recognition Award
Sphere Partners

Sphere Quarterly · Issue 01 · Agents

Your site has an API for humans. Now it needs one for agents.

Every major platform shipped agentic browsing in 2024–2025. Claude calls tools. ChatGPT calls Apps. Copilot calls connectors. The agents are arriving, and they don’t read HTML — they read structure. Sites that publish an MCP endpoint get called. The rest are left to be interpreted.

Plain English

If you only read one box on this page.

For thirty years, websites have served exactly one client: a person sitting behind a browser. In 2026 a second client showed up — AI agents. Claude, ChatGPT, Copilot, Cursor, custom GPTs, the next thousand. They don’t need pictures or padding. They need structure.

Today they fake it by scraping the HTML and guessing what your site does. They guess wrong frequently. They miss the “Book a demo” button because it’s an `aria-label` inside a `<button>` inside a modal. They misstate your pricing. They send users to your competitors’ pages by accident.

Sphere gives every site a second front door. Every site publishes an MCP endpoint — Model Context Protocol, the open standard Anthropic open-sourced in late 2024 and every major AI platform has adopted. Agents stop scraping. They start calling. The site exposes typed tools and signed resources. Every interaction is auditable.

The result: agents that act on the user’s behalf find the right page, book the right demo, pull the right blog post, and never hallucinate your pricing again. The site stays a website for humans. Underneath, it’s an API for everything else.

The situation
A user asks Claude: “Book me a demo of that AI compliance product.”
Today
Claude scrapes the site, guesses which form to fill, and gets the timezone wrong half the time.
With Sphere
Claude calls book_demo on the site’s MCP endpoint. The booking lands clean with timezone, owner, source.
The situation
A custom GPT helps an analyst summarize three competing vendors.
Today
It pulls cached crawls and hallucinates feature support.
With Sphere
It calls list_products, get_blog_post, search_content. Returns verbatim, with citations.
The situation
A regulator asks “what does your AI tell agents about us?”
Today
Nobody knows what crawlers cached or how a model paraphrased it.
With Sphere
Every MCP call is signed and logged. The full transcript is queryable.

Chapter 01

The crawl is dying. The call is arriving.

In plain English

For decades search engines and AI tools scraped your website — downloaded the HTML and guessed. In 2026 they want to call it instead, like a software API. Your site needs to answer.

The crawl is a thirty-year-old workaround. Search engines invented it because there was no other way for a piece of software to learn what a site contained. The arrangement was always uneasy — sites paid bandwidth to serve cached snapshots, and crawlers paid in cycles to parse HTML that was never meant to be read by machines. Both sides muddled through because there was no alternative.

In 2026 there is. Anthropic open-sourced Model Context Protocol in November 2024. Within a year, OpenAI, Microsoft, Google, Cursor, Replit, and every serious agentic product had implemented it. MCP is the wire format an LLM uses to call a tool — structured, typed, authenticated, auditable. It is the HTTP of the agentic web.

Sites that publish an MCP endpoint stop being parsed and start being called. The same engineering effort that wrote the public-facing booking page now answers book_demo(). The same content that lives in the CMS answers get_blog_post(slug). Zero duplicated work, dramatically higher fidelity, signed by default.

Live MCP call feed
streaming
412calls
last 24h
48p99 ms
at endpoint
9tools
exposed
    every call signed chain root 0x—

    Chapter 02

    Request, route, respond. The wire flow is small.

    In plain English

    An agent makes a structured request (JSON), the site routes it to the right tool, the tool does its job, the answer comes back signed. The whole round-trip is faster than rendering a single web page.

    The protocol is deliberately small. An MCP server advertises a list of tools (callable functions with typed inputs and outputs) and resources (addressable URIs the agent can fetch). A client sends a JSON-RPC request; the server validates, executes, and returns a typed result. The framing is identical to what any modern API uses, with two material differences: tools are discoverable (the agent can ask the server what it can do), and resources are content-addressed (an agent can cite, not just summarize).

    For a marketing site, the right surface is small: a search tool over your content, a list of blog posts, a fetch-by-slug for full bodies, a booking tool, a contact-form submitter, a newsletter subscribe. Sphere’s reference implementation exposes nine tools and four resource families. Total surface area: ~600 lines of TypeScript. One afternoon of work for a marketing site that’s now agent-readable for the next decade.

    Request to signed response
    ready
    1. 1
      Agent sends a JSON-RPC request
      Claude Desktop calls search_content with query “audit ledger”.
    2. 2
      Server validates and routes
      Origin checked, rate limit applied, tool resolved.
    3. 3
      Engram store answers
      Search hits the same index that powers on-site search — one source of truth.
    4. 4
      Response shaped & signed
      Typed JSON returned with content + canonical URLs the agent can cite.
    5. 5
      Call is logged to the audit ledger
      Who called, with what, what came back — queryable by your DPO.
    Round-trip in tens of milliseconds. Click to trace one.

    Chapter 03

    Nine tools, six resources, one front door.

    In plain English

    Every site needs the same handful of capabilities. Search the content. Read a post. List products. Book a demo. Submit a contact. We’ve picked the nine that cover 90 percent of what an agent will ever want from a B2B site.

    A surface this small is the point. The temptation when designing an agent-readable site is to expose everything. Resist it. Agents work best with a sharply curated tool list — fewer choices, clearer names, typed inputs that prevent stupid mistakes. The marketing site is not the CRM; the CRM has its own MCP server with its own scope.

    The right tools cover three jobs: read what we’ve published (search, list posts, fetch a post, list products), act on the visitor’s behalf (book a demo, submit a contact, subscribe to the newsletter, register a referral), and recall what the visitor has chosen to share (their engram, scoped by consent). That’s nine. Most sites will need fewer.

    Marketing site MCP surface
    spec 2025-06-18
    search_contentFree-text search across blog posts and product pages.
    list_blog_postsRecent posts with title, excerpt, tags, publish date.
    get_blog_postFull markdown body of a post by slug.
    list_productsPlatform modules with summaries and canonical URLs.
    book_demoBook a 30-minute slot with a solutions engineer.
    submit_contactFile a sales · support · security · compliance request.
    subscribe_newsletterSubscribe an email to the quarterly dispatch.
    register_referralRegister a referral lead for the partner program.
    recall_engramsRead the visitor’s engram memory — requires consent + visitor key.
    9 tools · 4 resource families ~600 lines of TypeScript

    Chapter 04

    Same content. Four readers. Four front doors.

    In plain English

    A human gets a beautiful page. An agent gets structured JSON. A crawler gets indexable markdown. An AI assistant gets the engram. All four front doors lead to the same underlying content.

    Once a site is agent-readable, the rendering surface multiplies. The same blog post is, in different contexts, an HTML page for humans, a JSON-RPC response for agents, a markdown body for traditional indexers, and a set of engrams an AI assistant can ground a longer conversation against. The content does not have to be authored four times. It has to be authored once, in a structure that can be projected four ways.

    This is the architecture every CMS will be rebuilt around between 2026 and 2028. The marketing teams that get there first will show up in agent answers the way the early SEO movers showed up in Google answers — quietly dominant, with budgets locked in.

    Same post, four readers
    /blog/audit-ledger
    One source of truth four projections

    Chapter 05

    What did the agents say about us last quarter?

    In plain English

    When an agent answers a user’s question with information from your site, that’s a profile of your company built by a piece of AI. EU AI Act Article 13 makes you accountable for it. With an MCP endpoint, the full transcript is yours.

    EU AI Act Article 13 requires AI deployers to provide transparency about the information their systems use. When an agent answers a buyer’s question about your product, the agent is a deployer of AI and your site is part of its information chain. If a regulator asks “what did your AI tell users about this company last quarter” — from a competitor’s point of view, that’s a discovery request waiting to happen — the answer is somewhere in millions of crawls and chat logs.

    An MCP endpoint pre-stages the answer. Every call is logged, signed, parent-linked. What the agent asked, what your site returned, the canonical URLs cited. Disputes about misrepresentation become a query, not an investigation.

    Agent-call disclosure
    EU AI Act Art. 13
    ?
    A regulator asks: what did agents say about us in Q2?
    Window · Apr 1 – Jun 30 2026  ·  deadline 30 days
    No disclosure yet. Press the button.

    Chapter 06

    Why this, why now: every platform shipped agents.

    In plain English

    In one year the entire industry moved from “you type, the AI answers” to “you ask, the AI does.” The doing happens against APIs. Sites without an API for agents will be invisible.

    Anthropic open-sourced MCP in November 2024. Within six months it was the de-facto interface for Claude Desktop, Cursor, Zed, dozens of agent frameworks. OpenAI shipped Apps and Operator. Microsoft shipped Copilot connectors. Google shipped Gemini agents. Salesforce shipped Agentforce. The industry standardised faster than any prior protocol — faster than REST, faster than GraphQL, faster than OAuth.

    The buyer behavior is shifting now. The same pattern that played out with Google in 2001–2005 — sites that adopted SEO early dominated for a decade — is playing out for agentic discovery in 2026–2028. The cost of adding an MCP endpoint is one afternoon. The cost of not having one in two years is being absent from every agentic recommendation engine on the open web.

    The regulatory tailwind is real. EU AI Act general-purpose-AI obligations are applicable from 2 August 2025; high-risk system obligations from 2 August 2026. Article 13 transparency and Article 26 deployer-logging requirements make signed, queryable agent interactions the path of least friction. Sites that publish an MCP endpoint with the ledger turned on satisfy the documentation requirement by construction. Sites that don’t are reconstructing logs from CDN headers.

    Cited Model Context Protocolmodelcontextprotocol.io (Anthropic, Nov 2024) · EU AI Act Reg. (EU) 2024/1689 — EUR-Lex; Arts. 13, 26, 50 · GDPR Reg. (EU) 2016/679 — EUR-Lex; Art. 30 records of processing · Agentic ecosystem referencesSalesforce Agentforce, OpenAI Apps, Microsoft Copilot connectors, Google Gemini agents.

    Chapter 07

    This piece is honest about the line.

    Sphere’s marketing site is the proof. sphere-iq.com/agent documents the live MCP endpoint at /api/mcp. We eat our own dog food. The list below separates what runs today from what ships in the next two quarters.

    Where we are, where we’re going
    Nine controls running now. Five extensions in the next two quarters.
    What your platform team can verify today
    • Live MCP endpointsphere-iq.com/api/mcp, MCP spec 2025-06-18.
    • Nine documented tools — search, list, fetch, book, submit, subscribe, refer, recall.
    • Four resource families — blog, platform, trust, manifesto.
    • Origin allowlist + per-IP rate limit at the edge.
    • Audit ledger — every call signed and parent-linked.
    • Consent-gated recall_engrams — visitor key required.
    • `llms.txt` + `llms-full.txt` — agent-discoverable site map.
    • Public agent docs at /agent with copy-paste setup for Claude Desktop, Cursor.
    • ~600 lines of TypeScript — small enough to fork into your own site this week.
    What ships in the next two quarters
    • OAuth-scoped tools — agents authenticate as a known partner before calling commercial endpoints.
    • Streaming tool results — long-running operations return progress events.
    • Per-agent rate budgets — preferred-partner agents get higher ceilings, anonymous agents stay throttled.
    • Auto-published `llms-full.txt` — regenerated when the CMS publishes.
    • Agent transcript export — one-click GDPR Art. 30 record for every agent interaction.