# auth.md

Agent authentication and registration information for CINDEX.

## Public Anonymous Access

Public discovery resources do not require credentials.

- Audience: agents, crawlers and search systems reading public CINDEX resources
- Credential type: none
- Scopes: `public:read`
- Discovery: https://cindex.fr/.well-known/api-catalog
- API documentation: https://cindex.fr/docs/api

## Protected Member APIs

CINDEX member, forum, document, calendar, survey and administration APIs are protected. They are not open to autonomous agent self-registration.

- Audience: authorized CINDEX members, administrators or explicitly approved service accounts
- Registration method: manual review by CINDEX
- Registration URI: https://cindex.fr/contact
- Credential types: manual session, administrator-provisioned access
- Scopes: `member:read`, `forum:read`, `documents:read`, `calendar:read`, `surveys:read`

Do not attempt to create accounts, issue credentials or access protected APIs without explicit authorization from CINDEX.

## OAuth Metadata

- Authorization Server Metadata: https://cindex.fr/.well-known/oauth-authorization-server
- Protected Resource Metadata: https://cindex.fr/.well-known/oauth-protected-resource

The OAuth metadata is published so agents can discover that CINDEX does not currently offer self-service OAuth token issuance for protected APIs.

## agent_auth

```json
{
  "agent_auth": {
    "skill": "https://cindex.fr/auth.md",
    "register_uri": "https://cindex.fr/contact",
    "claim_uri": "https://cindex.fr/contact",
    "revocation_uri": "https://cindex.fr/contact",
    "credential_types_supported": ["none", "manual_session", "admin_provisioned"],
    "identity_types_supported": ["anonymous", "verified_email"],
    "anonymous": {
      "credential_types_supported": ["none"],
      "claim_uri": "https://cindex.fr/auth.md#public-anonymous-access"
    },
    "verified_email": {
      "credential_types_supported": ["manual_session", "admin_provisioned"],
      "claim_uri": "https://cindex.fr/contact"
    }
  }
}
```