# Agent Registration & Authentication Policy (Auth.md)

Welcome to **AITIFICER** — AI Content Operations Platform for Teams.

This file provides automated authentication discovery, scope definitions, and registration instructions for AI agents, autonomous models, and MCP (Model Context Protocol) clients interacting with AITIFICER endpoints.

---

## 1. Overview & Service Metadata

- **Provider**: AITIFICER (https://aitificer.com)
- **Application Dashboard**: https://app.aitificer.com
- **API Base URL**: `https://app.aitificer.com/api/v1`
- **Protocol Support**: REST, SSE (Server-Sent Events), MCP (Model Context Protocol), WebMCP
- **Specification Standards**: RFC 9727 (API Catalog), RFC 9728 (OAuth Protected Resource), SEP-1649 / SEP-2127 (MCP Server Cards)

---

## 2. Agent Authentication Methods

AITIFICER supports three agent authentication flows:

### A. OAuth 2.0 / OpenID Connect (Recommended for Interactive Agents)
- **Authorization Endpoint**: `https://app.aitificer.com/auth`
- **Token Endpoint**: `https://app.aitificer.com/api/auth/token`
- **Discovery URL**: `https://aitificer.com/.well-known/openid-configuration`
- **Supported Grant Types**: `authorization_code`, `client_credentials`, `urn:ietf:params:oauth:grant-type:token-exchange`

### B. Bearer API Tokens (Recommended for Background Workers & Subagents)
- Pass token in HTTP header: `Authorization: Bearer <aitificer_agent_token>`

### C. MCP (Model Context Protocol) Remote Transports
- **SSE Transport Endpoint**: `https://app.aitificer.com/api/mcp/sse`
- **MCP Server Card**: `https://aitificer.com/.well-known/mcp/server-card.json`

---

## 3. Supported Scopes

| Scope | Description |
| :--- | :--- |
| `read:brand_context` | Read project memory, brand tone guidelines, and campaign briefs |
| `write:content_drafts` | Create and update generated copy, graphics, and video prompts |
| `execute:qa_pipeline` | Submit content for editorial review gates and quality scoring |
| `read:analytics` | Retrieve content performance and attribution metrics |

---

## 4. Agent Registration & Contact

- **Automated Agent Registration Portal**: https://app.aitificer.com/auth
- **Developer / Agent Operations Contact**: `contact@aitificer.com`
- **API Documentation**: https://aitificer.com/docs