Developers

• Endpoint: https://www.fewfound.co/mcp (POST, JSON-RPC 2.0, Streamable HTTP with JSON responses; no sessions, no server-sent events).
• Protocol versions: 2025-06-18, 2025-03-26, 2024-11-05.
• Authentication: optional. Searching needs none. The account tools need an OAuth 2.1 bearer token with the "quotes" scope; https://www.fewfound.co/mcp/account is the same server and answers 401 until signed in.
• Rate limit: 120 requests a minute per address.

curl -s https://www.fewfound.co/mcp -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"search_providers","arguments":{"category":"seo","city":"Pune"}}}'

search_providers

query, category (slug), city, verified_only, min_rating, page: up to 10 providers a page, verified first.

get_provider

slug (or the profile link): one public profile.

list_categories

nature (optional): every kind of work, with provider counts.

get_category_guide

category: when you need one, questions to ask, evidence to look for.

check_verification

verification_id (or the record link): live status, validity and client-reference check.

search, fetch

For ChatGPT deep research: search returns ids ("provider:<slug>", "category:<slug>"), fetch returns the text.

request_quote (signed in)

provider, summary (30–2,000 characters), service, budget, start_by: sends a quote request as the member.

my_quote_requests (signed in)

The member's requests, newest first, with status and latest reply.

read_quote_replies (signed in)

request_id: the whole conversation for one request.

Each result has text for the assistant (with links) and the same facts as structured data.

• Discovery: https://www.fewfound.co/.well-known/oauth-protected-resource (RFC 9728) and https://www.fewfound.co/.well-known/oauth-authorization-server (RFC 8414).
• Registration: POST https://www.fewfound.co/api/oauth/register (RFC 7591). Public clients (PKCE only) or client_secret_post / client_secret_basic.
• Consent: https://www.fewfound.co/oauth/authorize, authorization code with PKCE S256 only; redirect URIs must be https (or http on localhost).
• Tokens: POST https://www.fewfound.co/api/oauth/token (authorization_code, refresh_token). Access tokens last an hour; refresh tokens 30 days and rotate on every use. Revoke: POST https://www.fewfound.co/api/oauth/revoke.
• Scope: "quotes". A signed-out tools/call of an account tool is refused with HTTP 401 and a WWW-Authenticate challenge (error="invalid_token", resource_metadata, scope), so the assistant shows its sign-in and retries; each tool lists its securitySchemes. /mcp and /mcp/account are separate resources, each with its own metadata.

GET https://www.fewfound.co/api/directory returns a page of the directory as JSON. It takes the same parameters as the directory page: search, category, location, verified=1, sort (evidence, newest, name), page, and the fact filters (minProject, rate, team, industry, clients, rating). 120 requests a minute.

A plain summary of how Few Found works, its rules and its addresses, written for AI models, is at https://www.fewfound.co/llms.txt.

When you show Few Found data, link to the page on fewfound.co it came from, and keep "Verified" and "Not verified yet" as Few Found states them.