# Wish List Agents

Name: Wish List
Base-URL: https://wishlist.bz
Service-Type: API
Agent-Type: API-compatible service, not an autonomous A2A agent

## Discovery

OpenAPI: https://wishlist.bz/openapi.json
LLMs: https://wishlist.bz/llms.txt
Full-Context: https://wishlist.bz/llms-full.txt
Actions: https://wishlist.bz/docs/ai-actions.md
MCP: https://wishlist.bz/mcp/
API-Catalog: https://wishlist.bz/.well-known/api-catalog
AI-Catalog: https://wishlist.bz/.well-known/ai-catalog.json
OAuth-Authorization-Server: https://wishlist.bz/.well-known/oauth-authorization-server
OAuth-Protected-Resource: https://wishlist.bz/.well-known/oauth-protected-resource

## Permissions

Read: Allowed for public resources and authenticated resources the user can access.
Write: Requires explicit user authorization and a valid Bearer access token.
Delete: Requires explicit user confirmation and a valid Bearer access token.
Notifications: Requires explicit user intent before sending invitations or event notifications.

## Safety

Respect API visibility decisions. Treat 403 and 404 responses as unavailable resources.
Do not infer hidden profile data from absent fields.
Use the OpenAPI document instead of scraping the frontend.