# Auth.md

## SEARWEB Agent Authentication

SEARWEB publishes authentication and agent registration metadata for website discovery APIs.

## Public APIs

These APIs are public and do not require authentication:

- https://www.searweb.com/api/ai-feed
- https://www.searweb.com/api/sites
- https://www.searweb.com/webmcp.json
- https://www.searweb.com/.well-known/api-catalog
- https://www.searweb.com/.well-known/service.json
- https://www.searweb.com/.well-known/mcp/server-card.json

## Protected APIs

Protected APIs require OAuth-compatible authentication:

- https://www.searweb.com/api/admin/sites
- https://www.searweb.com/api/admin/generate-summary

## OAuth Discovery

- https://www.searweb.com/.well-known/oauth-authorization-server
- https://www.searweb.com/.well-known/openid-configuration
- https://www.searweb.com/.well-known/oauth-protected-resource

## Agent Registration

Registration URL:

https://www.searweb.com/login

Supported identity types:

- user
- service
- agent

Supported credential types:

- bearer_token
- oauth_authorization_code
- refresh_token

## Scopes

- openid
- email
- profile
- sites:read
- sites:write
- sites:submit
- sites:verify
- admin:sites

## Claims and Revocation

Claims metadata:

https://www.searweb.com/.well-known/openid-configuration

Protected resource metadata:

https://www.searweb.com/.well-known/oauth-protected-resource

Revocation:

https://www.searweb.com/logout

## Documentation

https://www.searweb.com/en/about

## Contact

https://www.searweb.com/en/contact