# auth.md

No authentication is required to use anything an agent can reach on this site.

## Audience

Autonomous agents and other machine clients reading eliancodes.com — the site of ElianCodes, a
Ghent-based web development studio.

## Registration

There is none, and there is nothing to provision. No API keys, no client registration endpoint, no
OAuth authorization server, no tokens. Because of that, this site deliberately does **not** publish
`/.well-known/openid-configuration`, `/.well-known/oauth-authorization-server` or
`/.well-known/oauth-protected-resource`: there is no issuer behind them, and advertising one would
send you to a dead end.

## What you can call anonymously

| Resource | Endpoint |
| --- | --- |
| JSON API (read-only) | `https://eliancodes.com/api/v1` — described by [`/openapi.json`](https://eliancodes.com/openapi.json) |
| MCP server (read-only tools) | `https://eliancodes.com/mcp` — described by [`/.well-known/mcp/server-card.json`](https://eliancodes.com/.well-known/mcp/server-card.json) |
| Agent skills | [`/.well-known/agent-skills/index.json`](https://eliancodes.com/.well-known/agent-skills/index.json) |
| Markdown of any page | send `Accept: text/markdown` |
| Documentation | [`/docs/api`](https://eliancodes.com/docs/api) |

Requests are rate limited per IP. Keep volumes reasonable and identify yourself with a descriptive
`User-Agent`.

## Credentials that do exist (not for agents)

Human customers who buy a template sign in at [`/account/login`](https://eliancodes.com/account/login) with
an emailed magic link, to download their purchase. That flow is interactive, has no programmatic
equivalent, and is not something an agent should attempt on someone's behalf.

## Contact

Anything not covered here, including partnership or higher-volume access requests:
[hello@elian.codes](mailto:hello@elian.codes) or [`/contact`](https://eliancodes.com/contact).