---
title: "The sandbox MCP server card"
method: GET
path: "/mcp/sandbox"
tags: ["MCP"]
---

# The sandbox MCP server card

`GET /mcp/sandbox`

## Request

- Base URL: `https://youspot.com`
- URL: `https://youspot.com/mcp/sandbox`
- Auth: none required

The demo server, described the same way. It runs the read tools of the product server against a seeded account, so an agent can see what a real tool call returns before anyone signs up. No credential, and a per-address rate limit.

## Headers

- `If-None-Match` string

## Response `200`

The card, including whether the sandbox is seeded.

- McpServerCard
  - `$schema` string, uri
  - `name` string, required: Reverse-DNS, e.g. `com.youspot/youspot`.
  - `title` string
  - `description` string, required
  - `version` string, required
  - `url` string, uri, required: Where to POST JSON-RPC.
  - `serverUrl` string, uri
  - `endpoint` string, uri
  - `transport` 'streamable-http', required
  - `kind` string: `product`, `docs` or `sandbox`.
  - `instructions` string
  - `protocolVersions` string[]
  - `documentationUrl` string, uri
  - `websiteUrl` string, uri
  - `capabilities` object
  - `authentication` object
    - `type` string
    - `required` boolean
    - `description` string
  - `tools` object[], required: Names and one-line summaries. The typed schemas come from `tools/list`.
    - `name` string, required
    - `description` string

## Other responses

- `304`: The document has not changed since the ETag you sent. No body.

---

[API](https://skmtc.dev/youspot/apis/youspot-http-api.md) · [All operations](https://skmtc.dev/youspot/apis/youspot-http-api/llms.txt) · [OpenAPI document](https://skmtc.dev/youspot/apis/youspot-http-api/revisions/6615ad5d017d?raw)