# Droviat Agent Automation Skill v1

## Purpose

Use this skill when an agent needs to automate Droviat campaign setup, campaign-scoped link authoring, governed UTM guidance, analytics review, or attribution-readiness checks.

## Operating rules

1. Prefer the hosted MCP endpoint for interactive sessions where a human can approve mutating actions.
2. Prefer the public API for unattended workflows, scheduled jobs, CI pipelines, or integrations that only need HTTP.
3. Always send explicit workspace context.
4. For hosted MCP write actions, require explicit user confirmation before setting `arguments.confirmed=true`.
5. Treat governed UTM suggestions as advisory input, not silent normalization.

## Workflow order

1. Read governed UTM suggestions, templates, presets, or context defaults.
2. Create or update a campaign.
3. Create or update campaign-scoped links.
4. Review analytics or attribution-readiness data.
5. Send conversion events only after confirming the trigger key.

## Hosted MCP session notes

- Endpoint: `POST /mcp`
- Auth: `Authorization: Bearer <droviat_access_token>`
- Required header: `x-workspace-id`
- Recommended client headers:
  - `x-mcp-client-id`
  - `x-mcp-client-name`
  - `x-mcp-client-version`

## Public API notes

- Use API keys with least-privilege scopes.
- `links:read` and `links:write` cover campaign and link automation.
- `analytics:read` covers reporting.
- `conversions:write` covers attribution trigger discovery and conversion delivery.
