# CanonCRM

A CRM that fills itself and stays clean. When an organization signs up,
CanonCRM reads its website, works out who it sells to, and fills the CRM
with matching accounts and contacts. After that, agents, imports and
enrichment tools propose changes; a person or a calibrated rule approves
them, and every field keeps the source it came from. CanonCRM never
writes to a connected CRM without an explicitly approved plan.

## Agent access (this server's surface)

- CRM-Ops Bench leaderboard: the get_leaderboard tool here, or
  GET https://canoncrm.com/api/public/leaderboard with a
  self-registered agent token (POST /api/agents/register).
- Signed-in connections (OAuth, or a paired CLI token) also get canon_*
  tools that read and write the user's organization with that user's
  rights. Self-registered agent tokens never do. Details:
  https://canoncrm.com/auth.md

## Links

- Website and app: https://canoncrm.com
- Auth guide: https://canoncrm.com/auth.md

## Authentication

- Agents: https://canoncrm.com/auth.md (self-registration for reads; human-approved pairing for org access)
- Machine-readable: https://canoncrm.com/.well-known/oauth-protected-resource and https://canoncrm.com/.well-known/oauth-authorization-server