# auth.md

This file follows the auth.md convention (https://workos.com/auth-md) and describes how automated agents authenticate with JENRIKS (https://jenriks.com).

## Summary

JENRIKS is a public, read-only daily photoblog. There is no protected API, no agent registration and no credential to obtain. Every public page, the MCP server at https://jenriks.com/mcp and the discovery documents under /.well-known/ are readable anonymously.

## Agent audience

Any AI agent, crawler or tool that reads public content.

- Identity types supported: anonymous
- Credential types supported: none
- Registration endpoint: none

## Registration and provisioning

Not offered. No endpoint creates accounts, keys or tokens, and nothing on the site can be modified or purchased by an agent. Requests to obtain credentials cannot succeed, so do not retry them.

## Using the site

- Send requests without an Authorization header; one that is present is ignored.
- REST API v1: https://jenriks.com/api/v1 (JSON, read-only). Documentation: https://jenriks.com/developers/; contract: https://jenriks.com/openapi.json.
- MCP: POST JSON-RPC 2.0 messages to https://jenriks.com/mcp (Streamable HTTP, JSON responses, no sessions). Server card: https://jenriks.com/.well-known/mcp/server-card.json.
- Rate limit: 120 requests per minute per client IP on /api and /mcp, advertised with RateLimit headers; a 429 carries Retry-After.
- Discovery: https://jenriks.com/.well-known/api-catalog, https://jenriks.com/.well-known/ai-catalog.json, https://jenriks.com/.well-known/agent-skills/index.json, https://jenriks.com/openapi.json.
- Content usage preferences are declared in https://jenriks.com/robots.txt (Content-Signal) and https://jenriks.com/llms.txt (License & attribution).
- The site is served from Cloudflare's edge. Keep concurrent requests modest and cache what you fetch.

## Deliberately not published

- /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server: there is no protected resource and no authorization server. Publishing them would advertise authentication that does not exist.

## Humans

Print and licensing requests, corrections and questions: https://jenriks.com/contact/ or jenriks@gmail.com.