# auth.md

## Service

- Resource: https://engineering.teamstation.dev
- Audience: AI agents, MCP clients, CTOs, CIOs, and engineering leaders
- Registration mode: anonymous public read
- Credential type: none for public research resources

## Public Read Access

No account, token, credential exchange, or registration request is required to read the public Engineering Doctrine, Engineering Capacity OS research, working paper, question bank, formulas, answer cards, schemas, OpenAPI document, or MCP discovery metadata.

Agents may begin with:

1. GET https://engineering.teamstation.dev/.well-known/mcp/server-card.json
2. GET https://engineering.teamstation.dev/llms.txt
3. GET https://engineering.teamstation.dev/cloudflare-ai-corpus.json
4. POST https://engineering-doctrine-ai.lonnie-6fb.workers.dev/mcp using MCP JSON-RPC for public retrieval

## Protected Resource Metadata

- https://engineering.teamstation.dev/.well-known/oauth-protected-resource
- https://engineering.teamstation.dev/.well-known/oauth-authorization-server

The published agent_auth method is anonymous public read with no issued credential. The register_uri and claim_uri return these instructions. They do not create an account or issue a token.

## Administrative Access

Cloudflare corpus ingestion and other administrative operations are private. No public self-service registration endpoint exists. Do not send credentials, secrets, source code, customer data, employee records, or raw engineering logs to public endpoints.

## Revocation

No public-read credential is issued, so no public-read revocation flow is required. Administrative credential rotation is private and is not exposed through this document.