# Labangram auth.md — Agent Registration & Access Policy

## Overview
Labangram Studio provides open, machine-readable access for AI agents to discover photography portfolios, check pricing, and read public documentation without mandatory credentials.

## Agent Registration & Auth Flow

```yaml
agent_auth:
  skill: "https://labangram.kamera-ichi.com/auth.md"
  register_uri: "https://labangram.kamera-ichi.com/contact"
  claim_uri: "https://labangram.kamera-ichi.com/contact"
  claim_endpoint: "https://labangram.kamera-ichi.com/contact"
  identity_endpoint: "https://labangram.kamera-ichi.com/contact"
  identity_types_supported:
    - "anonymous"
    - "identity_assertion"
  anonymous:
    credential_types_supported:
      - "none"
    claim_uri: "https://labangram.kamera-ichi.com/contact"
  identity_assertion:
    assertion_types_supported:
      - "verified_email"
      - "urn:ietf:params:oauth:token-type:id-jag"
    credential_types_supported:
      - "bearer"
    claim_uri: "https://labangram.kamera-ichi.com/contact"
```

## Supported Access Modes

### 1. Anonymous Read Access (Default)
- **Scope**: `public:read`
- **Authentication**: None required.
- **Claim URI**: https://labangram.kamera-ichi.com/contact
- **Endpoints**:
  - Homepage & Markdown Twins (`Accept: text/markdown` or `/*.md`)
  - LLM Context Directory: https://labangram.kamera-ichi.com/llms.txt, https://labangram.kamera-ichi.com/llms-full.txt
  - Agent Skills: https://labangram.kamera-ichi.com/.well-known/agent-skills/index.json
  - API Catalog: https://labangram.kamera-ichi.com/.well-known/api-catalog
  - MCP Server Card: https://labangram.kamera-ichi.com/.well-known/mcp/server-card.json
  - A2A Agent Card: https://labangram.kamera-ichi.com/.well-known/agent-card.json
- **Rate Limit**: 60 requests / minute per IP.

### 2. Inquiry Submission
- **Scope**: `lead:submit`
- **Authentication**: Anonymous or Client-Identified.
- **Claim URI**: https://labangram.kamera-ichi.com/contact
- **Endpoint**: https://labangram.kamera-ichi.com/contact.

## OAuth & Protected Resource Metadata
- **Protected Resource Metadata (RFC 9728)**: https://labangram.kamera-ichi.com/.well-known/oauth-protected-resource
- **Authorization Server Metadata (RFC 8414)**: https://labangram.kamera-ichi.com/.well-known/oauth-authorization-server
- **OpenID Configuration**: https://labangram.kamera-ichi.com/.well-known/openid-configuration
- **JWKS Endpoint**: https://labangram.kamera-ichi.com/.well-known/jwks.json
- **Scopes Supported**: `["public:read", "lead:submit"]`
- **Bearer Methods**: `["header"]`

## Contact & Security
- **Email**: labanchen@gmail.com
- **Instagram**: @labangram
- **Website**: https://labangram.kamera-ichi.com