# auth.md

Agent authentication and registration guide for **digitalfoundry.com**.

## Audience

AI agents (and their developers) that want to interact with Digital Foundry
programmatically — querying services, submitting contact requests, or booking
meetings via our REST API or public MCP endpoint.

## Registration

**No registration is required.** All agent-facing endpoints on this site are
public and anonymous:

- **MCP:** `https://digitalfoundry.com/mcp` (Streamable HTTP, stateless)
- **REST:** `POST https://digitalfoundry.com/api/agent-contact`,
  `GET/POST https://digitalfoundry.com/api/book-meeting`
- **API description:** `https://digitalfoundry.com/openapi.json`

## Supported identity types

- `anonymous` — no credentials of any kind are needed or accepted. There is no
  OAuth authorization server for this domain, and no
  `/.well-known/oauth-authorization-server` or
  `/.well-known/openid-configuration` document is published.

## Credential use

Do not send `Authorization` headers; they are ignored. Optionally identify
yourself with the `X-Agent-Id` and `X-Agent-Framework` request headers on REST
calls (or the equivalent `agent_id` / `agent_framework` payload fields) so we
can route and respond to your submission appropriately.

## Limits

All endpoints are rate-limited per IP (HTTP 429 with a `retry_after` field when
exceeded). Current limits: 20 requests/min for MCP and `/api/agent-contact`,
10/min for `/api/contact`, 20/min for booking endpoints.

## More

- Site guide for agents: <https://digitalfoundry.com/llms.txt>
- Questions: <webuildit@digitalfoundry.com>