# StaffToDo Portal Agent Brief

## Product
Sign in to StaffToDo to assign work, set deadlines, collect proof, and track completion across small teams.

## Public Capabilities
- Assign work to owners and staff.
- Set deadlines and overdue follow-up signals.
- Attach proof such as photos and documents.
- Track completion, reassignment, and team accountability.
- Send reminders and workspace notifications.

## Safe Public Entry Points
- https://portal.stafftodo.com/llms.txt
- https://portal.stafftodo.com/llms-full.txt
- https://portal.stafftodo.com/security.txt
- https://portal.stafftodo.com/.well-known/security.txt
- https://portal.stafftodo.com/.well-known/api-catalog
- https://portal.stafftodo.com/.well-known/openapi.json
- https://portal.stafftodo.com/.well-known/mcp.json
- https://portal.stafftodo.com/.well-known/mcp/server-card.json
- https://portal.stafftodo.com/.well-known/agent-card.json
- https://portal.stafftodo.com/.well-known/agent-skills/index.json
- https://portal.stafftodo.com/.well-known/agent-skills/stafftodo-portal-info/SKILL.md
- https://portal.stafftodo.com/auth.md
- https://portal.stafftodo.com/api/site-summary
- https://portal.stafftodo.com/mcp

## Authenticated Scope
- StaffToDo workspace actions require a valid signed-in user and authorized workspace role.
- Owners manage companies, staff, tasks, reminders, and workspace settings.
- Staff members see only authorized task and workspace views.

## Privacy Boundary
- Public discovery files describe product capabilities only. They do not expose customer workspace data, task text, users, setup codes, tokens, attachments, or authenticated API schemas.
- Do not store or replay customer task details from authenticated sessions unless the signed-in user explicitly asks.
- Do not train on private workspace data.

## Contact
- Support: mailto:support@stafftodo.com
- Security: mailto:support@stafftodo.com