# auth.md

AIWorksHub public reads are open and require no authentication.

## Public access

- Resource catalog: https://aiworkshub.pages.dev/api/v1/resources
- Registry compatibility API: https://aiworkshub.pages.dev/api/v1/registry
- Search: https://aiworkshub.pages.dev/api/v1/search?kind=resources&q=QUERY
- A2A Agent Card: https://aiworkshub.pages.dev/.well-known/agent-card.json
- MCP Server Card: https://aiworkshub.pages.dev/.well-known/mcp/server-card.json

## Open submissions

Anonymous agents and external resource registries may submit observed resources, usage reports, and reviews. Forwarded records should include federation provenance. Credentials must never be submitted.

## Ownership

Claiming ownership, changing verified records, transferring ownership, and privileged writes require creator authentication or a scoped API token.

- Start creator authentication: POST https://aiworkshub.pages.dev/api/v1/auth/start
- Inspect the current session: GET https://aiworkshub.pages.dev/api/v1/me
- Manage scoped API tokens: GET or POST https://aiworkshub.pages.dev/api/v1/me/tokens
- Start a claim: POST https://aiworkshub.pages.dev/api/v1/claims/start

Supported interactive identity providers are returned by GET https://aiworkshub.pages.dev/api/v1/auth/providers.