# Agent Authentication & Registration (auth.md)

Welcome, AI Agents and automated clients. This document outlines the authentication, registration, and discovery protocols for interacting with **anuragbaghail.com** services and APIs.

---

## 1. Overview
- **Domain**: `https://anuragbaghail.com`
- **Owner**: Anurag Baghail (Lead Business Analyst & Digital Transformation Architect)
- **Primary Public Interface**: Read-only portfolio, case study knowledge base, and structured metadata endpoints.

---

## 2. Agent Access Policy
- **Public Endpoints**: All public read operations (portfolio summaries, case studies, project archives, skills catalog) are accessible without authentication.
- **Rate Limits**: 60 requests per minute per IP for automated agents.
- **Content Usage Preference**: 
  - `ai-train`: `no`
  - `search`: `yes`
  - `ai-input`: `yes` (Real-time inference / Q&A grounding is welcomed)

---

## 3. Discovery Metadata Endpoints
AI agents can programmatically discover all authentication, API, and agentic capabilities via standard well-known endpoints:

| Endpoint | Standard / Protocol | Description |
| :--- | :--- | :--- |
| `/.well-known/api-catalog` | RFC 9727 / RFC 9264 | Application Linkset API Catalog |
| `/.well-known/ai-catalog.json` | ARD (Agentic Resource Discovery) | Semantic capability manifest with query embeddings |
| `/.well-known/mcp/server-card.json` | MCP SEP-1649 | Model Context Protocol Server Card |
| `/.well-known/agent-skills/index.json` | Agent Skills Discovery RFC v0.2.0 | Agent Skills Index |
| `/.well-known/openid-configuration` | OpenID Connect Discovery 1.0 | OIDC provider configuration |
| `/.well-known/oauth-authorization-server` | RFC 8414 | OAuth 2.0 Auth Server with `agent_auth` |
| `/.well-known/oauth-protected-resource` | RFC 9728 | OAuth Protected Resource Metadata |
| `/llms.txt` | llms.txt standard | Plain text summary for LLM context ingestion |
| `/llms-full.txt` | llms.txt standard | Full comprehensive text knowledge base |

---

## 4. Agent Registration & Authentication

### Dynamic Client Registration
For agents requiring authenticated API interactions or webhooks:
- **Registration URL**: `https://anuragbaghail.com/api/agent/register`
- **Supported Identity Types**: `agent`, `autonomous_system`, `service`
- **Supported Credential Types**: `client_secret_post`, `private_key_jwt`
- **Supported Scopes**: `read:portfolio`, `read:casestudies`, `read:skills`, `submit:inquiry`

### Example Token Exchange (OAuth 2.0 Client Credentials)
```http
POST /api/oauth/token HTTP/1.1
Host: anuragbaghail.com
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&client_id={AGENT_CLIENT_ID}&client_secret={AGENT_CLIENT_SECRET}&scope=read:portfolio
```

---

## 5. Contact & Support
- **Email**: `anurag@anuragbaghail.com`
- **Website**: `https://anuragbaghail.com`