GTM Index developer resources

GTM Index auth

GTM Index (gtmindex.io) is public by default. Agents should not invent an API key or an OAuth client.

What exists

• WebMCP and HTML catalogs — no Authorization header.
• Gateway people/jobs — public while GTME_PUBLIC_BROWSE is on. A Supabase JWT is optional and only required if that flag is flipped off.
• /login — humans claiming a GTM engineer profile, not API access.

What does not exist

• No public webhook receiver.
• No third-party OAuth application for agents.
• No write API.

GTM Index developer resources