# Watchtower MCP — AI agent integration guide

Canonical guide: https://www.watchtower.technology/agents/
Connection manifest: https://www.watchtower.technology/agents/mcp.json
Reviewed: 2026-10-09

## Connect

Endpoint: https://watchtower.technology/agent/mcp
Transport: remote HTTP, JSON-RPC over HTTPS.
Authorization: Bearer YOUR_WATCHTOWER_MCP_TOKEN
Content-Type: application/json
Accept: application/json, text/event-stream

The /agents/ page is documentation, not the MCP endpoint. A GET to /agent/mcp
provides public service metadata; authenticated MCP calls require a valid token
and appropriate account entitlement. Tokens are created by a signed-in user in
Watchtower Advanced → AI Agent MCP — Hosted Agent Access. Store the token using
the client's secret controls. Do not send credentials to the documentation page
or place them in URLs, prompts, reports, screenshots or repositories.

Initialize with protocolVersion "2024-11-05", capabilities {}, and clientInfo.
Send notifications/initialized, then tools/list. Follow the returned schemas;
clients may normalize the advertised dotted tool names in their own interfaces.

## Recommended research sequence

1. tools/call watchtower.list_data_routes with category/query as needed.
2. Choose a returned path and its supported params. Follow page.nextOffset to
   continue discovery. The live route catalogue is authoritative.
3. tools/call watchtower.read_data_route with path, params and a bounded limit.
4. Preserve dataset identity, source URLs/dates, capturedAt, stale/degraded state,
   coverage and missing-value semantics.
5. Reuse the returned snapshot and page.nextOffset for continuation with the
   same path/query/selector. Use selector for a subtree. Follow returned text
   continuation fields for long strings using the advertised current schema.
6. Restart if the snapshot expired or mismatched. Never silently splice pages
   from different snapshots. Reader pagination and upstream/source pagination
   are different; complete snapshot retrieval is not universal source coverage.

Example discovery tools/call params:
{"name":"watchtower.list_data_routes","arguments":{"category":"weather-hazards","query":"earthquakes"}}

Example first read tools/call params:
{"name":"watchtower.read_data_route","arguments":{"path":"/agent/api/earthquakes","limit":20}}

Example continuation (replace snapshot and offset with returned values):
{"name":"watchtower.read_data_route","arguments":{"path":"/agent/api/earthquakes","snapshot":"RETURNED_SNAPSHOT","offset":20,"limit":20}}

## Advertised tools

watchtower.list_data_routes — reviewed dataset discovery
watchtower.read_data_route — snapshot-aware paginated reads
watchtower.search — canonical source-linked corpus search
watchtower.get_data_points — normalized evidence/source packs
watchtower.get_osint_observations — normalized public-source observations
watchtower.get_cross_domain_alerts — cross-domain assessments
watchtower.get_country_risk — country-risk rows/summary
watchtower.get_crypto_intel — crypto evidence
watchtower.get_global_bond_intel — fixed-income evidence
watchtower.get_military_air — military/air/early-warning signals
watchtower.get_reports — entitled report manifest
watchtower.deep_analysis — optional, separately entitled report generation

On 2026-10-09 public metadata listed 12 tools and an authenticated catalogue
listed 178 routes for the checking account. These are dated observations, not
fixed promises. Get current schemas and entitlement-filtered discovery live.

## Access boundaries and interpretation

Use access only within the current user's authorization and task. Reviewed
dataset routes are read-only and exclude accounts, credentials/API connections,
billing, administration, MCP tokens, private workspaces/portfolios/reports/settings,
streams, operational controls and mutations. Deep Analyst generation is a
separate optional tool; do not invoke it merely to discover or read a dataset.

Do not use arbitrary URLs, owner selectors or force/cache-busting parameters.
Do not invent values for missing or unavailable evidence. Cite sources and
observation dates, retain units/coverage and distinguish observed data from
calculated assessments and your interpretation. Respect source licences and
attribution; access does not grant universal redistribution rights.

## Errors

401: missing, invalid, expired or revoked token; check the bearer header.
403: account/tool/route entitlement or scope restriction.
400: refresh tools/list; check parameter names, types and allowed values.
Snapshot error: restart with a fresh snapshot and keep its pages together.
429: respect Retry-After where present and use bounded backoff.
Unavailable/degraded: surface the limitation and source date; do not fabricate.

Pricing/eligibility: https://www.watchtower.technology/#pricing
Terms: https://www.watchtower.technology/lander/terms/
Privacy: https://www.watchtower.technology/lander/privacy/
Support: admin@watchtower.technology