---
agent_auth:
  register_uri: "https://rowancampion.art/oauth/register"
  identity_types_supported: ["anonymous"]
  anonymous:
    credential_types_supported: ["bearer_token", "api_key"]
  claim_uri: "https://rowancampion.art/oauth/claim"
  revocation_uri: "https://rowancampion.art/oauth/revoke"
---

# auth.md

This document provides instructions for AI agents seeking programmatic access to protected APIs and resources on **Rowan Campion | Visual Archive**.

---

## 1. OAuth 2.0 & OIDC Authorization Server

- **Issuer URL**: `https://rowancampion.art`
- **Protected Resource Identifier**: `https://rowancampion.art/api/v1`
- **Metadata Document**: `/.well-known/openid-configuration`
- **Authorization Server Metadata**: `/.well-known/oauth-authorization-server`
- **Protected Resource Metadata**: `/.well-known/oauth-protected-resource`

---

## 2. Agent Registration

Agents can register dynamically or request access tokens using client credentials or agent token exchange:

- **Registration Endpoint**: `https://rowancampion.art/oauth/register`
- **Token Endpoint**: `https://rowancampion.art/oauth/token`
- **Supported Identity Types**: `agent`, `user`
- **Supported Credential Types**: `bearer_token`, `api_key`

---

## 3. Scopes

- `read:art`: Read access to artwork details and portfolio metadata.
- `write:art`: Interactive creation or modification privileges for authorized sessions.
- `query:catalog`: Discovery queries across artwork series.

---

## 4. Header Authentication

Supply access tokens in HTTP requests using standard Authorization header:

```http
Authorization: Bearer <your_agent_access_token>
```