O'Reilly
by O'Reilly
Search O'Reilly's catalog of books, videos, courses and live events from an AI agent. The listed Search tier returns metadata and links only, never book text. A paid Expert tier adds cited snippets. OAuth or a revocable token, and no scopes at all.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect O'Reilly via MCP
https://api.oreilly.com/api/content-discovery/v1/mcp/Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
O'Reilly Tools & Capabilities (1)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- No scopes exist, in any descriptor.
scopes_supportedis an empty array in both the RFC 9728 resource descriptor and the authorization server metadata, and the OpenAPI security definition declares an emptyscopesobject. Nothing at the OAuth grant narrows anything, and a token cannot be scoped down. On a single read-only tool the exposure is small; the mitigation is that tokens are individually revocable. - We could not read tool schemas or safety annotations. The endpoint returned HTTP 401 to an anonymous request, so no
tools/listresponse was seen. Everything about the tool's parameters comes from O'Reilly's published specification, not from the server. - The listed connector returns no content, only pointers. No excerpt, snippet or full text crosses the wire. An agent cannot answer a technical question from the book — only name the book. Snippet retrieval requires the separately sold Expert MCP server at a different endpoint.
- Results are capped small by default. O'Reilly documents a default of 5 results and a maximum query length of 500 characters. English is the default language filter, so non-English material is invisible unless
languagesis set explicitly. - Search is keyword, not semantic. O'Reilly describes the tool as a keyword search with results comparable to on-platform search. A conceptual query phrased in the reader's own words may miss material a semantic index would find.
ask_oreilly_expertson the paid tier is the answer to that, and it is not in this listing. - The licence is stricter than most readers expect. The Membership Agreement of October 9, 2024 forbids transmitting O'Reilly content "as input or a prompt to a machine learning or AI system" without the copyright owner's written permission. Using the connector is fine — it is O'Reilly's own retrieval feature — but pasting O'Reilly text into an agent by other means is not, and the 250-word aggregate quotation limit is not enforced by any tool.
- No rate limits are published. Neither specification nor the MCP guide mentions throttling, quota or HTTP 429 handling. Limits probably exist and are simply undocumented; plan for unknown ceilings.
- Whether an agent consumes a seat is unstated. No O'Reilly document addresses automated use against the "personal use only" clause. Treat it as unresolved, not as permitted.
- The documentation page is invisible to text extractors. O'Reilly's MCP docs render entirely client-side from a Redocly single-page app, and every path under
/apidocs/returns the same shell. A plain fetch of the documented URL yields four words of text; the content lives in OpenAPI documents under a separate/dist/path that required a real browser to discover. Anything summarising these docs from a simple fetch has read nothing. - Two endpoints exist and each source names only one. The directory's
content-discoverypath and O'Reilly's documentedsearchpath are both live with separate resource descriptors, and neither party's documentation acknowledges the other's URL. - Entitlement filtering is documented but unverifiable by us. O'Reilly states results are filtered to the token's permissions. We could not test this without credentials and did not try.
Frequently asked questions
Not the one Anthropic lists. Its response schema carries title, authors, publisher, page count, a cover image and a link — no field for body text, chapters or excerpts. A separate paid Expert server does return snippet text through a citation tool, but that is a different endpoint requiring a different entitlement.
None at all. Both the RFC 9728 resource descriptor and the authorization server metadata declared scopes_supported as an empty array on 2026-08-23, and the OpenAPI security definition declares an empty scopes object too. Three independent declarations agree. Nothing can be granted selectively, which matters less on a single read-only tool.
Yes. O'Reilly states that all requests require authentication and that no anonymous requests are permitted, and an anonymous call returned HTTP 401 when we checked on 2026-08-23. O'Reilly's guide describes the Search server as available to all O'Reilly members, so it is a membership benefit rather than a public API.
Its Membership Agreement forbids it in general terms. Content accessed via the Service may not be stored, reproduced or transmitted, including as input or a prompt to a machine learning or AI system, without written permission from the copyright owner. The MCP server is O'Reilly granting that permission through a controlled product rather than an exception you may assume.
No, and its robots.txt names the crawlers. GPTBot, anthropic-ai, Google-Extended, CCBot and cohere-ai sit under a heading reading AI training scrapers with content access disallowed. The Membership Agreement separately forbids extracting content to train a machine learning or AI system. O'Reilly treats attributed retrieval and model training as different things.
No. The single listed tool is search_oreilly_content, a keyword search whose documented parameters are all query filters, with no identifier of a record to modify. Nothing creates, updates or deletes. Even the paid Expert server adds only two more read tools, so no O'Reilly MCP surface writes anything at all.
No single call spends anything metered. O'Reilly publishes no per-call price, credit balance or quota, and the membership you already hold is what grants access. No tool reports usage or billing either, but with nothing consumable per call there is no runaway spend for an agent to cause.
Because two paths are live. Anthropic's directory registers the content-discovery path while every O'Reilly document gives a search path instead. We confirmed on 2026-08-23 that both return an identical authentication challenge and each publishes its own resource descriptor. Neither redirects to the other, and O'Reilly never mentions the directory's path.
Sources
- O'Reilly MCP Server documentation (retrieved 2026-08-23). Rendered in a browser; the underlying OpenAPI document is at · retrieved 2026-08-23
- O'Reilly Expert MCP Server specification, the three-tool paid tier (retrieved 2026-08-23) · retrieved 2026-08-23
- O'Reilly MCP Guide, Search versus Expert tiers and admin setup (retrieved 2026-08-23) · retrieved 2026-08-23
- O'Reilly Membership Agreement, the AI, prompting, spider and 250-word quotation clauses (retrieved 2026-08-23), last updated October 9, 2024 · retrieved 2026-08-23
- O'Reilly terms of service (retrieved 2026-08-23), last updated December 19, 2019 · retrieved 2026-08-23
- O'Reilly AI policy, "O'Reilly's approach to generative AI" (retrieved 2026-08-23) · retrieved 2026-08-23
- O'Reilly crawler policy,
robots.txtwith its labelled bot groups (retrieved 2026-08-23) · retrieved 2026-08-23 - Live OAuth posture check: anonymous initialize returning HTTP 401 with a
www-authenticatechallenge, RFC 9728 metadata athttps://api.oreilly.com/.well-known/oauth-protected-resource/api/content-discovery/v1/mcp, and authorization server metadata athttps://api.oreilly.com/.well-known/oauth-authorization-server/api/content-discovery/v1(2026-08-23) · retrieved 2026-08-23 - Second live endpoint confirmed at
https://api.oreilly.com/api/search/v1/mcpwith its own resource descriptor (2026-08-23) · retrieved 2026-08-23 - Anthropic Connectors Directory entry — , read from our directory snapshot dated 2026-08-16 · retrieved 2026-08-16
- O'Reilly support — · Privacy
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Productivity
- Developer
- O'Reilly
- Tools
- 1
- Domain
- api.oreilly.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.