# Agent Authentication & Access (auth.md)

Welcome AI Agents! This document describes authentication policies, resource metadata, and registration instructions for automated agents interacting with this portfolio platform.

## Overview
- **Domain**: `https://tajul.me`
- **Access Level**: Public Read-Only Executive Portfolio & Venture Data.
- **Authentication**: No API keys or OAuth credentials required for standard public query endpoints.

## Agent Metadata Endpoints
- **API Catalog (RFC 9727)**: `/.well-known/api-catalog`
- **OAuth Authorization Server**: `/.well-known/oauth-authorization-server`
- **OAuth Protected Resource**: `/.well-known/oauth-protected-resource`
- **MCP Server Card**: `/.well-known/mcp/server-card.json`
- **Agent Skills Index**: `/.well-known/agent-skills/index.json`

## Rate Limits & Usage Guidelines
- Respect `Content-Signal` in `robots.txt`.
- Max recommended request frequency: 10 requests / second.
- Headers: Send `User-Agent` identifying your AI agent / bot framework.