# auth.md

Agent authentication and registration for `www.engineeringleaders.io`.

Last updated: 2026-09-04

## Summary

**No authentication is required. There is nothing to register for.**

Every machine-readable surface on this site is public, authless and free to
call. There is no OAuth authorization server, no API key, no account, and no
rate-limit tier that registration would unlock. This document exists so an
agent can establish that fact without probing for credentials.

## Audience

Autonomous agents and AI assistants that want to call the Engineering Leaders
Community Toolkit MCP server, read this site's content as Markdown, or fetch
the partnership offer catalog.

## Endpoints and how to call them

| Surface | URL | Method | Credentials |
|---|---|---|---|
| MCP server, toolkit (Streamable HTTP) | `https://www.engineeringleaders.io/mcp` | JSON-RPC over POST | none |
| MCP server, trade (Streamable HTTP) | `https://www.engineeringleaders.io/mcp/trade` | JSON-RPC over POST | none |
| MCP server, partnership builder | `https://www.engineeringleaders.io/mcp/partnership` | JSON-RPC over POST | none |
| A2A endpoint | `https://www.engineeringleaders.io/a2a/v1` | JSON-RPC over POST | none |
| Agent Skills index | `https://www.engineeringleaders.io/.well-known/agent-skills/index.json` | GET | none |
| Site profile for language models | `https://www.engineeringleaders.io/llms.txt` | GET | none |
| Long-form content corpus | `https://www.engineeringleaders.io/llms-full.txt` | GET | none |
| Markdown twin of any page | append `.md` to the page path | GET | none |
| Index of every Markdown twin | `https://www.engineeringleaders.io/md-sitemap.txt` | GET | none |
| Partnership offer catalog | `https://www.engineeringleaders.io/partner/offer-catalog.json` | GET | none |
| MCP server card | `https://www.engineeringleaders.io/.well-known/mcp/server-card.json` | GET | none |
| A2A agent card | `https://www.engineeringleaders.io/.well-known/agent-card.json` | GET | none |
| API catalog | `https://www.engineeringleaders.io/.well-known/api-catalog` | GET | none |

### Registration

Not applicable. There is no registration endpoint, because there is no
credential to issue. An agent that has found this file already has everything
it needs to call every endpoint above.

### Credential use

None. Do not send an `Authorization` header — it is ignored. Do not attempt a
client-registration or token exchange against this origin; no such endpoint
exists and any URL that appears to offer one is not operated by this site.

## OAuth metadata

Deliberately absent. This site publishes no
`/.well-known/oauth-authorization-server`,
`/.well-known/oauth-protected-resource` or
`/.well-known/openid-configuration`, because it runs no authorization server
and protects no resource. Publishing those documents would describe endpoints
that do not exist and would send agents into a flow that cannot complete.

If that changes, this file changes with it.

## Other agent protocols

Absent for the same reason, and worth stating so nobody adds them by mistake.

**Web Bot Auth.** No `/.well-known/http-message-signatures-directory`. That
directory belongs to the party that sends signed requests, not the one that
receives them. ELC runs no crawler that signs its traffic, so the file would
publish keys that sign nothing.

**Agentic commerce.** No ACP, AP2, MPP, UCP or x402 documents. This site sells
nothing to an agent. Partnership packages are priced in the public offer catalog
above, and they close with a conversation. There is no checkout for a bot to
finish and no wallet behind one.

A scanner that grades this site will mark those items incomplete. That is the
correct result, not a gap to close.

## Usage expectations

The endpoints are open, not unlimited. Please identify yourself with a real
`User-Agent`, and keep request rates reasonable. Crawler policy for training
and search is stated separately in
[`/robots.txt`](https://www.engineeringleaders.io/robots.txt).

## Contact

weare@engineeringleaders.io