# CINDEX Public API

This document lists the public, unauthenticated API resources advertised for automated discovery.

## Discovery

- API catalog: /.well-known/api-catalog
- OpenAPI description: /.well-known/openapi.json
- Agent skills index: /.well-known/agent-skills/index.json
- Content usage preferences: /.well-known/content-signals
- Agent context: /llms.txt
- Agent authentication: /auth.md
- OAuth Authorization Server metadata: /.well-known/oauth-authorization-server
- OAuth Protected Resource metadata: /.well-known/oauth-protected-resource
- MCP Server Card: /.well-known/mcp/server-card.json
- Markdown negotiation: send Accept: text/markdown to public HTML pages

## Public endpoints

- GET /api/public/stats
- GET /api/public/companies
- GET /api/settings/theme
- GET /api/settings/home-page-content

Authenticated member and administration APIs are intentionally omitted from the public catalog.

## Authentication discovery

Public resources use anonymous access. Protected member APIs require explicit CINDEX authorization and are not open to autonomous agent self-registration.