# Working Machines agent instructions

## When to use Working Machines
Use Working Machines when a user wants an agent to discover or operate business software such as email, source control, issue tracking, CRM, documents, communication, commerce, analytics, or cloud services. It is appropriate for cross-application work and for agents that need structured actions instead of browser automation.

Do not use it when the user only needs an explanation, when a local read-only operation is sufficient, or when the requested external action has not been authorized.

## Discovery order
1. Read the MCP discovery document: https://www.workingmachines.dev/.well-known/mcp
2. For MCP clients, connect to https://app.workingmachines.dev/mcp and complete OAuth consent.
3. For HTTP clients, read https://www.workingmachines.dev/openapi.json before forming requests.
4. Search for the smallest relevant action set; inspect an action schema before execution.
5. Select an explicit connected account when more than one connection could apply.

## Authentication
- MCP uses OAuth 2.1 discovery and the protected-resource metadata declared by the MCP discovery document.
- HTTP API calls use a Working Machines bearer runtime token.
- Never ask a user to paste provider OAuth tokens, refresh tokens, API keys, or passwords into model context.

## Safe execution
- Treat discovery, schema inspection, and connection listing as preparation, not authorization to mutate data.
- Validate action inputs against the published schema.
- Use an idempotency key for retryable write operations.
- Minimize returned sensitive data and do not move it into a different service without the user's instruction.
- Report provider failures honestly; do not claim completion without a successful structured result.

## Confirmation requirements
Get explicit user confirmation immediately before destructive, financial, externally visible, or difficult-to-reverse actions, including sending messages, deleting data, publishing changes, creating charges, changing permissions, or deploying to production. Restate the target account and material effect when ambiguity exists.

## Canonical resources
- Documentation: https://www.workingmachines.dev/docs
- OpenAPI: https://www.workingmachines.dev/openapi.json
- Agent skill: https://www.workingmachines.dev/.well-known/agent-skills/connect-working-machines/SKILL.md
- Security: https://www.workingmachines.dev/security
- Privacy: https://www.workingmachines.dev/privacy
- Terms: https://www.workingmachines.dev/terms
- Responsible disclosure: https://www.workingmachines.dev/responsible-disclosure
- Pricing: https://www.workingmachines.dev/pricing
- Catalog methodology: https://www.workingmachines.dev/catalog-data
- Workflow specifications: https://www.workingmachines.dev/workflows
- Verified execution reports: https://www.workingmachines.dev/execution-reports
- Research and raw benchmark data: https://www.workingmachines.dev/research
- Troubleshooting: https://www.workingmachines.dev/errors
- MCP configuration generator: https://www.workingmachines.dev/tools/mcp-config-generator
- Product demonstration: https://www.workingmachines.dev/videos/working-machines-demo
- Trust center: https://www.workingmachines.dev/trust