# auth.md

> Agent authentication and registration notes for Aires del Maipo.

## Audience

AI agents and tools discovering public venue information, event types, and how to request a quote.

## Public access (anonymous — no credentials)

Default identity type: anonymous (credential type: none).

Most agent-facing data is public — no registration required:

- https://www.airesdelmaipo.cl/wp-json/aires/v1/venue
- https://www.airesdelmaipo.cl/wp-json/aires/v1/health
- https://www.airesdelmaipo.cl/llms.txt
- WordPress REST read endpoints under https://www.airesdelmaipo.cl/wp-json/wp/v2/

## Registration / provisioning (elevated access)

Agents that need elevated or write access register with a human operator:

1. register_uri: https://www.airesdelmaipo.cl/contacto/ (or WhatsApp +56 9 9083 0259)
2. Describe the integration (read-only venue info vs. quote automation).
3. Staff provisions access and shares scopes: venue:read, events:read, contact:write.
4. claim_uri: https://www.airesdelmaipo.cl/auth.md — claim/use credentials once issued.
5. revocation_uri: https://www.airesdelmaipo.cl/contacto/ — request revocation from the same channel.

## Supported identity types

- anonymous — default for public GETs; credential_types_supported: none; claim_uri: https://www.airesdelmaipo.cl/auth.md
- Human-provisioned WordPress Application Passwords for protected write routes

## Credential use

Public GETs need no Authorization header.

If credentials are issued, send Authorization: Bearer TOKEN (or WordPress Application Password basic auth) only to agreed endpoints. Do not store credentials in public prompts.

Protected Resource Metadata: https://www.airesdelmaipo.cl/.well-known/oauth-protected-resource

## Discovery documents

- OAuth Protected Resource: https://www.airesdelmaipo.cl/.well-known/oauth-protected-resource
- Authorization Server metadata: https://www.airesdelmaipo.cl/.well-known/oauth-authorization-server
- OpenID configuration: https://www.airesdelmaipo.cl/.well-known/openid-configuration
- API catalog: https://www.airesdelmaipo.cl/.well-known/api-catalog