# Auth.md

Grafit Agency agent authentication and registration notes.

Grafit Agency's public website does not require agent registration or OAuth authentication for its public pages and discovery resources.

## Current status

- Public website content: no authentication required.
- Public discovery endpoints: no authentication required.
- Public product API: not available from this website.
- OAuth/OIDC issuer: not published because there is no protected public API on this website.
- OAuth protected resource metadata: not published because there is no protected public API on this website.

## Registration and integrations

Agents or partners that need a custom integration should contact Grafit directly:

- Contact page: https://www.grafit.agency/contact
- Email: hello@grafit.agency

If Grafit later publishes a protected API, this file should be updated together with:

- `/.well-known/oauth-authorization-server`
- `/.well-known/oauth-protected-resource`
- API scopes and registration instructions