# Flottix

> Deterministic IT asset & license registry designed for AI agents.
> Multi-tenant, fully audited, scope-enforced. Agents operate; humans govern.

The AI-native surface is the MCP server: https://flottix.app/api/mcp (Streamable HTTP,
auth: `Authorization: Bearer flottix_...`). 17 tools across domains
(assets, licenses, kits, users, directory, insights, governance, admin),
compound workflow tools (offboard/onboard employees, zombie-asset audits,
procurement ingestion) and an escape hatch exposing the full REST API.

- OpenAPI contract: https://flottix.app/openapi.json
- Interactive docs: https://flottix.app/docs
- Agent quickstart: https://flottix.app/docs/agent-quickstart.md
- MCP endpoint: https://flottix.app/api/mcp

Auth: create an API key via `POST /api/v1/api-keys` (or Settings -> API
Keys in the dashboard), then send `Authorization: Bearer flottix_...`.
Scopes are per resource (`read:assets`, `write:licenses`, ...). Free plan
includes full API/MCP access up to 50 items.
Machine flow: exchange the key at `POST /api/v1/oauth/token`
(`grant_type=client_credentials`). Interactive agents: OAuth 2.1
authorization code + PKCE with user consent — register at
`POST /api/v1/oauth/register`, discover via
`/.well-known/oauth-authorization-server` (RFC 8414).