Add a link and it is stored but does not appear. Upload a profile picture and it is not visible. Create a page and it is empty. Each of those looks like success to an agent and like a bug to the user — so Lnk.Bio writes the consequence into the description itself, along with which call must come first and which are irreversible. Every vendor exposing a multi-step product should read these.
Lnk.Bio's endpoint, which listed 33 tools to our unauthenticated probe. The tool descriptions are written as a procedure: which call comes first, what will not appear unless you do the next step, what cannot be undone.
- get_profile — documented as the first call when building or improving a profile
- Links: list, add, edit, delete, sort — with scheduling windows and positions
- Groups: listing them requires a MINI subscription
- Pages: list, add, edit, delete, sort — new pages are empty and the main page cannot be deleted
- Blocks: list_block_types before adding anything, then add, delete and sort — blocks control what actually renders
- update_profile_pic — with an explicit warning that uploading does not make it visible on its own
OAuth 2.0 with PKCE and dynamic registration, scope basic. Listing works unauthenticated; the calls are gated on a connected account. Revoke from the Lnk.Bio account page.
Paste a URL, then authorize — add the endpoint to your client, then approve the OAuth consent screen