# auth.md

> Agent registration and authentication metadata for vertodigital.com.

vertodigital.com is a fully public website. No credentials, tokens, or registration are required to access any resource.

## Agent Registration Flow

### 1. Discover

Fetch the authorization server metadata to understand the supported identity types:

```
GET /.well-known/oauth-authorization-server
```

The `agent_auth` block in the response lists supported identity types and endpoints.

### 2. Register

POST your identity type to the registration endpoint:

```
POST /agent/identity
Content-Type: application/json

{"identity_type":"anonymous"}
```

Anonymous registration requires no prior credentials. The server acknowledges the registration without issuing tokens - all resources remain accessible without a bearer token.

### 3. Claim

Not applicable. No claim ceremony is required for anonymous access.

### 4. Exchange

Not applicable. No token exchange is required. All resources are accessible without a bearer token.

### 5. Use

Access any resource directly:

- `/llms.txt` - structured site index for AI agents
- `/.well-known/api-catalog` - RFC 9727 API catalog
- `/.well-known/agent-skills/index.json` - agent skills discovery index
- `/.well-known/mcp/server-card.json` - MCP server card (SEP-2127)
- `/markdown/{slug}.md` - any page as clean markdown
- Send `Accept: text/markdown` on any page URL to receive a markdown response
- MCP server: `https://mcp.vertodigital.com/mcp`

### 6. Revoke

Not applicable. No credentials are issued, so no revocation is possible.

## Protected Resources

None. OAuth Protected Resource Metadata is published for agent discoverability only:

- `/.well-known/oauth-protected-resource` - resource identifier with anonymous scope
- `/.well-known/oauth-authorization-server` - authorization server metadata with `agent_auth` block
- `/.well-known/jwks.json` - JSON Web Key Set (empty; no tokens are signed)