# Canondex (DoD)

DoD is an agent-accessible index of curated public-data directories. It returns pointers, not listings.

SameRead (https://sameread.itiriumgroup.workers.dev) is the first directory tenant: ranked food-establishment inspections from official open-data feeds.

## Auth

Send header `X-Api-Key` or `Authorization: Bearer <key>` on metered routes.
Demo key: `dod_dev_discover_000`.
Missing or unknown key → HTTP 401 `{"error":"unauthorized","hint":"send X-Api-Key"}`.
Over quota → HTTP 402 `{"error":"quota_exceeded","hint":"billing stub; no payment processor"}` with no payment URL.
Stripe is not wired (`stripe.wired=false`). Checkout is not live.
Quota is an in-memory ledger on this Worker and resets when the isolate recycles.

`/`, `/llms.txt`, `/openapi.json`, and `/health` are unmetered.

## Discover

GET /v1/discover?intent=food_inspections&city=austin&state=TX
GET /v1/discover?intent=realtors&state=TX&county=Harris
GET /v1/discover?intent=trade_licenses&state=TX&county=Harris
GET /v1/discover?intent=childcare_ops&state=TX&county=Harris
GET /v1/discover?intent=realtors&state=TX&county=Travis
GET /v1/discover?intent=nursing_homes&country=US&state=TX
GET /v1/discover?intent=k12_schools&country=US&state=TX
GET /v1/discover?intent=food_inspections&city=houston&state=TX&stale=1

Response shape: `{ query, matches[], note }`.
Each match has `next.url` (and optional `next.mcp` / `next.auth`). Call that URL next.
Do not expect rankings, entities, or license rows in the discover body.

## OpenAPI

GET /openapi.json

## Do not

Do not treat this index as a listings warehouse.
Do not scrape HTML search UIs for facts this index points at.
Do not expect Authority Host to appear as a geo-intent discover match.
Do not invent scores or licenses with a model when a pointer exists.