# Alfalaki auth.md

Welcome to Alfalaki (`alfalaki.space`), an astronomical computing and astrology platform.

## Agent Audience & Purpose

This document outlines autonomous agent registration, discovery, and credential issuance for programmatic integration with Alfalaki astrology calculations and ephemeris APIs.

## Discovery Documents

- **OAuth Protected Resource Metadata (RFC 9728)**: `/.well-known/oauth-protected-resource`
- **OAuth Authorization Server Metadata (RFC 8414)**: `/.well-known/oauth-authorization-server`
- **OpenID Connect Discovery**: `/.well-known/openid-configuration`
- **API Catalog (RFC 9727)**: `/.well-known/api-catalog`
- **MCP Server Card (SEP-1649)**: `/.well-known/mcp/server-card.json`
- **Agent Skills Discovery Index (RFC v0.2.0)**: `/.well-known/agent-skills/index.json`
- **ARD Capability Manifest**: `/.well-known/ai-catalog.json`

## Agent Registration & Authentication

### 1. Anonymous Access (Public Tier)
- **Claim Endpoint**: `POST https://alfalaki.space/agent/claim`
- **Credential Types**: `api_key`
- **Header**: `Authorization: Bearer <token>` or `x-api-key: <key>`
- **Rate Limit**: 60 requests/minute

### 2. Identity Assertion (ID-JAG & Verified Workloads)
- **Registration Endpoint**: `POST https://alfalaki.space/agent/register`
- **Supported Identity Types**: `identity_assertion`, `anonymous`
- **Assertion Types**: `urn:ietf:params:oauth:token-type:id-jag`, `verified_email`
- **Token Endpoint**: `POST https://alfalaki.space/oauth/token`