# auth.md — AI Agent Access & Authentication Policy

This document defines the agent registration, authentication, and access protocols for autonomous AI agents, scrapers, and LLM clients interacting with https://firetable.tech.

## 1. Agent Audience

This specification applies to all autonomous agents, developer tools, web crawlers, AI search engines, and multi-agent systems accessing public pages, Markdown feeds, and APIs hosted on `https://firetable.tech`.

## 2. Authentication Model: Public & Anonymous Access

The blog and all associated content APIs are **100% open and publicly accessible**. No pre-registration, API keys, OAuth tokens, or human-in-the-loop claim workflows are required to read or parse content.

- **identity_types_supported**: `["anonymous"]`
- **anonymous.credential_types_supported**: `["none"]`
- **register_uri**: `https://firetable.tech/auth.md`
- **claim_uri**: `https://firetable.tech/auth.md`
- **Registration**: Not required for read-only access.
- **Credential Types**: `none` (All GET endpoints are unauthenticated).
- **Claim Flow**: Not required (`claim_uri`: `https://firetable.tech/auth.md`).

## 3. Supported Endpoints

All endpoints support direct HTTP GET requests:

| Resource | Path | Format | Description |
| :--- | :--- | :--- | :--- |
| **Site Index** | `/llms.txt` | `text/markdown` | Structured site summary & article index |
| **Full Corpus** | `/llms-full.txt` | `text/markdown` | Complete Markdown corpus of all public articles |
| **Article Markdown** | `/{slug}.md` | `text/markdown` | Single article with YAML frontmatter |
| **Homepage Markdown** | `/index.md` | `text/markdown` | Home feed index in Markdown |
| **OpenAPI Spec** | `/api/openapi.json` | `application/openapi+json` | Machine-readable API schema |
| **RFC 9727 Catalog** | `/.well-known/api-catalog` | `application/linkset+json` | API linkset catalog |
| **PRM (RFC 9728)** | `/.well-known/oauth-protected-resource` | `application/json` | Protected resource metadata |
| **Auth Server (RFC 8414)**| `/.well-known/oauth-authorization-server` | `application/json` | Authorization server metadata & agent_auth |

## 4. Content Negotiation

Agents may request any HTML page with the header:
```http
Accept: text/markdown
```
The server responds directly with clean Markdown and `Content-Type: text/markdown; charset=utf-8`.

## 5. Rate Limiting & Etiquette

Standard Cloudflare edge rate limits apply. Agents are requested to observe the directives in `https://firetable.tech/robots.txt` and honor standard `Retry-After` headers when applicable.