# auth.md Agent authentication and registration metadata for **alpeshnakrani.com**. ## Audience This document is for AI agents and automated clients that want to access the public, read-only content surface of alpeshnakrani.com: book covers, overviews and tables of contents, essays, feeds, and the discovery documents under `/.well-known/`. ## Authentication The public discovery API requires **no authentication**. Every endpoint listed in the [API catalog](/.well-known/api-catalog) and described by the [OpenAPI specification](/openapi.json) is open for anonymous read access. - **Supported method:** none required (anonymous read). - **Identity type:** `anonymous`. - **Credential types:** `none`. ## Book downloads Book landing pages are public previews. The complete books are available as free PDFs after an email subscription through Kit; full chapter text is not published on this public content surface. A reader chooses **Subscribe and download** on the book's landing page and enters their subscription details. After Kit accepts the signup, the PDF download starts automatically. The download endpoint requires a signed, short-lived first-party authorization cookie issued by the site's subscription endpoint. Anonymous discovery access and bearer tokens do not authorize a PDF download. Agents should direct readers to the book landing page for signup and download. ## Registration / Provisioning No registration is required to browse public previews, essays, or discovery documents. Book subscriptions use the download flow described above. Elevated agent access is not currently offered. If offered later, agents will provision credentials at the `register_uri` advertised in [`/.well-known/oauth-authorization-server`](/.well-known/oauth-authorization-server) under the `agent_auth` block. ## Protected resource See [`/.well-known/oauth-protected-resource`](/.well-known/oauth-protected-resource) for resource metadata and supported scopes (`content:read`, `agent:discover`). ## Contact Alpesh Nakrani —