# Auth.md Agent Registration

Publish agent authentication registration metadata so automated clients can find the right registration path without scraping human-only docs.

## Fix

1. Serve `/auth.md` from the site root as Markdown.
2. Include agent registration instructions, supported identity types, credential types, and links to OAuth metadata.
3. Publish `/.well-known/oauth-protected-resource` with `resource` and `authorization_servers`.
4. Add an `agent_auth` object to `/.well-known/oauth-authorization-server`.

Example `agent_auth` block:

```json
{
  "agent_auth": {
    "register_uri": "https://example.com/auth.md",
    "supported_identity_types": ["human_delegated", "service_agent"],
    "credential_types_supported": ["oauth2_authorization_code_pkce", "api_key_bearer"],
    "claims_url": "https://example.com/.well-known/oauth-protected-resource",
    "revocation_url": "https://example.com/oauth/revoke"
  }
}
```

## Verify

```bash
curl -i https://example.com/auth.md
curl -s https://example.com/.well-known/oauth-authorization-server | jq .agent_auth
curl -s https://example.com/.well-known/oauth-protected-resource | jq .
```