# auth.md

> Agent registration policy for https://www.caress.co.il.

## TL;DR for agents

The public Caress catalog is **anonymous**. No agent registration is required, no access tokens are issued, and shopper accounts at `/my-account/` are for humans only. Call the public MCP and catalog directly.

## Resource type

- **Type:** public WooCommerce / LearnDash catalog (products, courses, articles)
- **Auth required for public catalog:** none
- **Human accounts:** [login](https://www.caress.co.il/my-account/) — do not create or claim customer accounts via this protocol
- **Private data:** customers, orders, and lessons are never exposed on these endpoints

## Discovery

- Protected resource metadata: [https://www.caress.co.il/.well-known/oauth-protected-resource](https://www.caress.co.il/.well-known/oauth-protected-resource)
- Authorization server metadata: [https://www.caress.co.il/.well-known/oauth-authorization-server](https://www.caress.co.il/.well-known/oauth-authorization-server)
- Public catalog MCP: [https://www.caress.co.il/wp-json/caress/v1/mcp](https://www.caress.co.il/wp-json/caress/v1/mcp)
- Public catalog JSON: [https://www.caress.co.il/wp-json/caress/v1/public-catalog](https://www.caress.co.il/wp-json/caress/v1/public-catalog)
- Agent skills: [https://www.caress.co.il/.well-known/agent-skills/index.json](https://www.caress.co.il/.well-known/agent-skills/index.json)

## Agent registration

**No credentials are issued.** Identity type `anonymous` is the only supported method. GET or POST [https://www.caress.co.il/wp-json/caress/v1/agent-register](https://www.caress.co.il/wp-json/caress/v1/agent-register) to acknowledge that. The response sets `credentials_required: false`. There is no claim ceremony and no `revocation_uri` because no agent credential exists to revoke.

```json
{
  "agent_auth": {
    "skill": "https://www.caress.co.il/auth.md",
    "register_uri": "https://www.caress.co.il/wp-json/caress/v1/agent-register",
    "identity_endpoint": "https://www.caress.co.il/wp-json/caress/v1/agent-register",
    "identity_types_supported": ["anonymous"],
    "anonymous": {
      "credential_types_supported": ["none"],
      "claim_uri": "https://www.caress.co.il/wp-json/caress/v1/agent-register"
    },
    "credential_types_supported": ["none"],
    "claim_uri": "https://www.caress.co.il/wp-json/caress/v1/agent-register",
    "claim_endpoint": "https://www.caress.co.il/wp-json/caress/v1/agent-register"
  }
}
```

## Contact

- Site: [https://www.caress.co.il](https://www.caress.co.il/)