[Google Tag Manager](https://www.googletagmanager.com/ns.html?id=GTM-KSJLNSNV) [](/) Open main menu [Home](/)[Showcase](/showcase)[Articles](/articles)[Contact](/contact) Toggle theme[Get Clarity](/contact) [Home](/)[Showcase](/showcase)[Articles](/articles)[Contact](/contact) Toggle theme[Get Clarity](/contact) Developers # Public API This site exposes a small public endpoint for contact form submissions. Admin and CMS APIs are private and not documented here. ## Contact submission `POST /api/contact` accepts HTML form encoding (`application/x-www-form-urlencoded` or `multipart/form-data`) with the following fields: - firstName (required) - lastName (required) - email (required, valid email format) - message (required) - phone (optional) Successful responses return JSON with `{ "success": true }`. Validation errors return `400`; failing bot verification returns `403`. ## Bot Protection In production, requests are checked with Vercel Bot Protection. Automated clients should expect that unauthenticated or bot-flagged requests may receive a `403` response. Legitimate browser-based submissions include the verification signals the platform expects. ## Authentication The public contact API is designed for browser form submissions, not OAuth 2.0 or OpenID Connect. There is no client credentials or authorization-code flow for this endpoint; in production, legitimate traffic must satisfy bot verification as described above. This site does not publish `/.well-known/openid-configuration` or `/.well-known/oauth-authorization-server` because it does not operate an authorization server for third-party API clients. Admin and CMS HTTP routes use private cookie-based sessions and are not part of this public API surface. ## OpenAPI A machine-readable OpenAPI 3 description of this endpoint is published at [/openapi.json](/openapi.json). ## Discovery Agent and machine discovery metadata is advertised via HTTP `Link` headers on the homepage (RFC 8288) and via [/.well-known/api-catalog](/.well-known/api-catalog) (RFC 9727)—an API catalog linkset, not OAuth authorization server metadata. This site also serves [/.well-known/oauth-protected-resource](/.well-known/oauth-protected-resource) (RFC 9728), which describes the resource identifier and optional authorization server issuers for token-based access when configured—it is not an authorization server and does not replace `/.well-known/openid-configuration`. For Model Context Protocol discovery, this host publishes [/.well-known/mcp/server-card.json](/.well-known/mcp/server-card.json) (and the same payload at [/.well-known/mcp/server-cards.json](/.well-known/mcp/server-cards.json) for tools that probe the plural path first) as draft SEP server card metadata, plus a minimal public MCP over Streamable HTTP at `/api/mcp`—read-only tools (`site_info`, `ping`) for site metadata and reachability. That endpoint is not the contact form and does not expose admin or CMS operations. For [Agent Skills](https://agentskills.io/) discovery (RFC v0.2.0), this origin lists published skills and integrity digests at [/.well-known/agent-skills/index.json](/.well-known/agent-skills/index.json). Skill artifacts live under `/.well-known/agent-skills/`; this is not OAuth authorization server metadata. [](/) Clarity that delivers results. [Home](/)[Showcase](/showcase)[Articles](/articles)[Contact](/contact) © 2026 Brehnor Communications. All rights reserved. This website is built with Next.js, Tailwind CSS, and shadcn/ui. [Ask ChatGPT](https://chatgpt.com/?q=As%20a%20potential%20client%2C%20I%20want%20to%20understand%20Brehnor%20Communications%20and%20the%20services%20they%20offer.%20\(https%3A%2F%2Fbrehnorcomms.com\))[Ask Perplexity](https://www.perplexity.ai/search/new?q=As%20a%20potential%20client%2C%20I%20want%20to%20understand%20Brehnor%20Communications%20and%20the%20services%20they%20offer.%20\(https%3A%2F%2Fbrehnorcomms.com\))[Ask Claude](https://claude.ai/?q=As%20a%20potential%20client%2C%20I%20want%20to%20understand%20Brehnor%20Communications%20and%20the%20services%20they%20offer.%20\(https%3A%2F%2Fbrehnorcomms.com\))[FAQ](/faq)[Privacy Policy](/privacy)