# PlatPhorm SitemapOps

SitemapOps is the route evidence engine for PlatPhormNews: it validates public routes, sitemaps, robots files, feeds, llms files, OpenAPI specs, MCP manifests, well-known policy files, canonicals, and source packets for SearchOps, TrustOps, AgentOps, and the root graph.

## When to use SitemapOps
Use SitemapOps to validate sitemap authority, robots declarations, feeds, canonicals, indexability, lastmod quality, public route reachability, and bounded cross-scanner evidence for a public website.

## When not to use SitemapOps
Do not use SitemapOps for private-network crawling, credentialed content, penetration testing, destructive actions, unrestricted whole-site crawling, or claims about search-engine indexing that were not independently observed.

## Public-safe surfaces
- /
- /about
- /contact
- /privacy
- /developers
- /terms
- /security
- /corrections
- /editorial-policy
- /ai-policy
- /dashboard
- /services
- /scans
- /sitemaps
- /robots
- /feeds
- /openapi
- /mcp
- /llms
- /well-known
- /dead-links
- /canonicals
- /route-evidence
- /network-graph
- /trustops
- /searchops
- /agentops
- /reports
- /integrations
- /docs
- /api/docs
- /api/v1/webhooks/events
- /api/v1/trace/links
- /faq
- /api/health
- /api/v1/health
- /health
- /openapi.yaml
- /openapi.json
- /openapi.yml
- /llms.txt
- /llms-full.txt
- /llms-index.json
- /llm-index.json
- /agents.md
- /robots.txt
- /sitemap.xml
- /sitemap-main.xml
- /sitemap-network.xml
- /sitemap-full.xml
- /sitemap-index.xml
- /rss.xml
- /feed.xml
- /atom.xml
- /manifest.webmanifest
- /manifest.json
- /humans.txt
- /attribution.json
- /json-ld.json
- /.well-known/mcp.json
- /.well-known/api-catalog
- /.well-known/agents.json
- /.well-known/agent-policy.json
- /.well-known/ai-policy.json
- /.well-known/ai-plugin.json
- /.well-known/security.txt
- /.well-known/trust.json
- /.well-known/llms.txt
- /.well-known/llms-full.txt
- /.well-known/llms-index.json
- /.well-known/sitemap-network.xml
- /.well-known/sitemap-full.xml

## Protected actions
Protected mutating, publishing, full-crawl, registry, report publishing, and export actions require PLATPHORM_API_KEY. Accepted headers are Authorization: Bearer $PLATPHORM_API_KEY and X-PlatPhorm-API-Key: $PLATPHORM_API_KEY.

## Limits and fallback behavior
Public target crawls are HTTPS-only, SSRF-protected, response-size bounded, redirect-revalidated, robots-aware, limited to 1,000 discovered URLs and 25 sampled routes, and limited to 20 child sitemaps. Unavailable sources and historical correlation are returned as degraded or unknown. Retry later or inspect the named source; never treat missing evidence as a pass.

## Primary integrations
- PlatPhorm Root Graph: https://platphormnews.com (Canonical network topology and public service manifest)
- Base Sitemap Index: https://base.platphormnews.com (Crawlable public sitemap index source)
- SearchOps: https://searchops.platphormnews.com (Crawl packet consumer and source validation)
- TrustOps: https://trustops.platphormnews.com (Route policy evidence consumer)
- AgentOps: https://agentops.platphormnews.com (Agent discovery and action policy consumer)
- MCP Registry: https://mcp.platphormnews.com (Capability registry and MCP validation)
- PlatPhorm API: https://api.platphormnews.com (Platform API surface validation)
- Spec Workbench: https://spec.platphormnews.com (Schema and contract validation)
- BrowserOps: https://browserops.platphormnews.com (Browser journey and UI route validation)
- Evals: https://evals.platphormnews.com (Route and discovery scorecards)
- Docs: https://docs.platphormnews.com (Public report publishing)
- Sheets: https://sheets.platphormnews.com (Route matrix exports)
- Trace: https://trace.platphormnews.com (Trace-linked evidence and span inspection)
- Monitor: https://monitor.platphormnews.com (Availability and uptime correlation)
- WebhookLab: https://webhooks.platphormnews.com (Webhook event validation)
- AgentUI: https://agentui.platphormnews.com (Agent-facing flow validation)
- Claws: https://claws.platphormnews.com (Remediation workflow handoff)
- OpenContent: https://opencontent.platphormnews.com (Public content route evidence)
- Dictionary: https://dictionary.platphormnews.com (Term and route vocabulary references)

## Machine interfaces
- OpenAPI JSON: https://sitemapops.platphormnews.com/openapi.json
- OpenAPI YAML: https://sitemapops.platphormnews.com/openapi.yaml
- MCP endpoint: https://sitemapops.platphormnews.com/api/mcp
- LLMS index: https://sitemapops.platphormnews.com/llms-index.json
- Target sitemap crawl: POST https://sitemapops.platphormnews.com/api/v1/scan-target with { "url": "https://target.example", "limit": 250 }. Authenticated AnswerReady orchestration may additionally provide bounded sitemapXml, sitemapPath, and sharedScanContext; SitemapOps validates the normalized target, reuses the root artifact, and still crawls bounded child sitemaps and sample routes.
- Target crawl is read-only and bounded: robots sitemap declarations, sitemap indexes/children, sampled reachability, redirects, canonical/noindex/robots signals, lastmod quality, external locations, and important public-surface coverage are reported separately.
- Webhook event audit: https://sitemapops.platphormnews.com/api/v1/webhooks/events
- Trace link audit: https://sitemapops.platphormnews.com/api/v1/trace/links

Updated: 2026-09-01T02:59:11.635Z

## SitemapOps validation capabilities
- Sitemap and sitemap-index XML validation
- Robots policy validation
- RSS and Atom validation
- llms.txt, llms-full.txt, and llms-index.json validation
- OpenAPI route validation
- MCP manifest and endpoint validation
- Well-known policy validation
  - Canonical URL and dead-link dry-run evidence
  - Public-target sitemap crawling with robots declarations, child indexes, bounded URL sampling, canonical/noindex/redirect checks, lastmod quality, and important-surface coverage
- SearchOps, TrustOps, and AgentOps packet generation
- Root graph dry-run update packets
- WebhookLab event emission with server-side PLATPHORM_API_KEY when configured
- Trace link audit records for operator handoff

## Public/protected boundary
Web dashboard, public-safe discovery, browser-based operations, trusted-domain discovery, standard route compliance, Vercel metadata capture, trace inspection, and agentic workflow discovery are intentionally supported for public read-only debugging and operator workflows. Mutating, administrative, ingestion, replay, fork, remediation, deployment, sync, test-triggering, reporting, and write actions require PLATPHORM_API_KEY.

## Trace policy
SitemapOps accepts and propagates W3C Trace Context for cross-site checks. Public packets include trace identifiers and never include secrets, cookies, Authorization, X-PlatPhorm-API-Key, raw request bodies, or raw x-vercel-ja4-digest values.

## platphormctl examples
- platphormctl site inspect sitemapops
- platphormctl mcp validate sitemapops
- platphormctl policy inspect sitemapops
- platphormctl sitemapops scan-root --dry-run
- platphormctl sitemapops scan-service root --dry-run
- platphormctl sitemapops validate-sitemap https://platphormnews.com/sitemap.xml
- platphormctl sitemapops validate-robots https://platphormnews.com/robots.txt
- platphormctl sitemapops searchops-source --dry-run
- platphormctl sitemapops trustops-source --dry-run
- platphormctl sitemapops agentops-source --dry-run