# Auth.md

<!-- Auth.md v1 — https://github.com/workos/auth.md -->

## Service
- **Name:** Toldos y Carpas de México
- **Website:** https://www.toldosycarpasdemexico.com/
- **Contact:** info@toldosycarpasdemexico.com
- **Support phone:** +52 33 3142 3844

## Overview
All content published at this domain is **public** and does not require
authentication. This document exists so that AI agents can discover the
current auth posture of the site and any future protected endpoints.

## Agent Registration
No self-service agent registration endpoint is exposed at this time.
To request a machine-to-machine credential for a future integration,
email **info@toldosycarpasdemexico.com** with:

1. Agent / product name
2. Operator / company name
3. Callback URL(s)
4. Requested scopes
5. Contact email for revocation notices

## OAuth Discovery
- OpenID Connect discovery: `/.well-known/openid-configuration`
- OAuth 2.0 authorization-server metadata: `/.well-known/oauth-authorization-server`
- OAuth 2.0 protected-resource metadata: `/.well-known/oauth-protected-resource`

## Identity Types Supported
- `human` — end-user login (currently none required; site is public)
- `agent` — AI agent acting on behalf of a human (email-based provisioning)
- `service` — server-to-server (email-based provisioning)

## Credential Types Supported
- `oauth2_client_credentials` (planned, on request)
- `oauth2_authorization_code_pkce` (planned, on request)

## Claim & Revocation
- Claim / rotate: email info@toldosycarpasdemexico.com
- Revocation: email info@toldosycarpasdemexico.com — credentials revoked within 24h

## Policies
- Privacy policy: https://www.toldosycarpasdemexico.com/privacy-policy
- Terms of service: https://www.toldosycarpasdemexico.com/terms