# auth.md

You are an agent. This service supports **agentic registration**: discover → register → (claim if needed) → exchange for an access_token → call API → handle revocation. Follow the steps in order; do not skip ahead.

## Agent Auth

```yaml
agent_auth:
  skill: https://brand1me.com/auth.md
  register_uri: https://brand1me.com/auth.md
  identity_types_supported:
    - anonymous
    - identity_assertion
  credential_types:
    - bearer_token
  claim_uri: https://brand1me.com/contact
  revocation_uri: https://brandme-api.brandme266.workers.dev/api/auth/revoke
```

## Step 1 — Discover
- **Protected Resource:** https://brand1me.com/.well-known/oauth-protected-resource
- **Authorization Server:** https://brand1me.com/.well-known/oauth-authorization-server
- **API Catalog (RFC 9727):** https://brand1me.com/.well-known/api-catalog
- **AI Resource Discovery (ARD):** https://brand1me.com/.well-known/ai-catalog.json
- **MCP Server Card:** https://brand1me.com/.well-known/mcp/server-card.json
- **Agent Skills Index:** https://brand1me.com/.well-known/agent-skills/index.json
- **LLM Summary:** https://brand1me.com/llms.txt
- **LLM Full Knowledge Base:** https://brand1me.com/llms-full.txt

## Step 2 — Register
- **Registration URI:** https://brand1me.com/auth.md
- **Supported Identity Types:** `anonymous`, `identity_assertion`
- **Supported Credential Types:** `bearer_token`
- **Claim URI:** https://brand1me.com/contact