# auth.md

geo-seo-aio.de stellt oeffentliche Lese-Endpunkte fuer Agenten ohne Login bereit. Geschuetzte Schreib- oder Ingest-Endpunkte werden ueber die unten veroeffentlichten OAuth-Discovery-Dokumente beschrieben.

## Public endpoints

- /llms.txt
- /llms.json
- /skill.md
- /.well-known/agent-skill.md
- /.well-known/agent-skills/index.json
- /.well-known/api-catalog
- /.well-known/openapi.json
- /.well-known/mcp/server-card.json
- /api/markdown
- /api/graphrag
- /mcp
- /datasets

## OAuth discovery

- Authorization server metadata: https://www.geo-seo-aio.de/.well-known/oauth-authorization-server
- OpenID configuration alias: https://www.geo-seo-aio.de/.well-known/openid-configuration
- Protected resource metadata: https://www.geo-seo-aio.de/.well-known/oauth-protected-resource
- JWKS: https://www.geo-seo-aio.de/.well-known/jwks.json

## Agent registration

- Register URI: https://www.geo-seo-aio.de/agent/auth/register/
- Supported identity types: anonymous, verified_email, identity_assertion
- Supported credential types: bearer_token
- Scopes: geo.read, geo.datasets.read, geo.graphrag.read, geo.research.ingest
- Bearer method: header

## Protected resource

```json
{
  "resource": "https://www.geo-seo-aio.de",
  "authorization_servers": [
    "https://www.geo-seo-aio.de"
  ],
  "scopes_supported": [
    "geo.read",
    "geo.datasets.read",
    "geo.graphrag.read",
    "geo.research.ingest"
  ],
  "bearer_methods_supported": [
    "header"
  ],
  "resource_documentation": "https://www.geo-seo-aio.de/auth.md"
}
```

## Authorization server

```json
{
  "issuer": "https://www.geo-seo-aio.de",
  "authorization_endpoint": "https://www.geo-seo-aio.de/agent/auth/authorize/",
  "token_endpoint": "https://www.geo-seo-aio.de/oauth2/token/",
  "revocation_endpoint": "https://www.geo-seo-aio.de/oauth2/revoke/",
  "jwks_uri": "https://www.geo-seo-aio.de/.well-known/jwks.json",
  "registration_endpoint": "https://www.geo-seo-aio.de/agent/auth/register/",
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "urn:ietf:params:oauth:grant-type:jwt-bearer",
    "urn:workos:agent-auth:grant-type:claim"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "none"
  ],
  "scopes_supported": [
    "geo.read",
    "geo.datasets.read",
    "geo.graphrag.read",
    "geo.research.ingest"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "service_documentation": "https://www.geo-seo-aio.de/auth.md",
  "agent_auth": {
    "skill": "https://www.geo-seo-aio.de/auth.md",
    "register_uri": "https://www.geo-seo-aio.de/agent/auth/register/",
    "identity_endpoint": "https://www.geo-seo-aio.de/agent/identity/",
    "claim_endpoint": "https://www.geo-seo-aio.de/agent/identity/claim/",
    "claim_uri": "https://www.geo-seo-aio.de/agent/identity/claim/",
    "events_endpoint": "https://www.geo-seo-aio.de/agent/event/notify/",
    "identity_types_supported": [
      "anonymous",
      "verified_email",
      "identity_assertion"
    ],
    "credential_types_supported": [
      "bearer_token"
    ],
    "anonymous": {
      "credential_types_supported": [
        "bearer_token"
      ],
      "claim_uri": "https://www.geo-seo-aio.de/agent/auth/claims/"
    },
    "verified_email": {
      "credential_types_supported": [
        "bearer_token"
      ],
      "claim_uri": "https://www.geo-seo-aio.de/agent/auth/claims/",
      "assertion_types_supported": [
        "verified_email"
      ]
    },
    "identity_assertion": {
      "credential_types_supported": [
        "bearer_token"
      ],
      "assertion_types_supported": [
        "urn:ietf:params:oauth:token-type:id-jag"
      ]
    },
    "revocation_uri": "https://www.geo-seo-aio.de/oauth2/revoke/",
    "events_supported": [
      "credential.revoked",
      "https://schemas.workos.com/events/agent/auth/identity/assertion/revoked"
    ]
  }
}
```

## MCP

Der MCP-Endpunkt https://www.geo-seo-aio.de/mcp/ ist ein oeffentlicher JSON-RPC-Endpunkt fuer Lesezugriff auf geo-seo-aio.de. Er bietet Tools fuer GraphRAG-Suche, Markdown-Seiten und Datasets sowie Ressourcen fuer llms.txt, llms.json, skill.md und Dataset-Indizes.

## Usage

Die Inhalte duerfen fuer Suche, AI Input und zitierende Agenten genutzt werden, sofern geo-seo-aio.de als Quelle genannt wird und Aussagen nicht aus dem Kontext geloest werden.