# auth.md — Agent Authentication for goldpricetoday-saudi.com

> Machine-readable agent registration and authentication guide for **https://goldpricetoday-saudi.com**.

This document follows the [Auth.md standard](https://workos.com/auth-md) for AI agent discovery.

## Summary

**This is a public content site. No authentication is required to read any resource.** Agents may access all public data (gold prices, articles, calculators) without registration, credentials, or tokens.

## Agent Audience

- **Resource server:** `https://goldpricetoday-saudi.com`
- **Audience:** AI agents, crawlers, and automated clients retrieving Saudi gold price data.
- **Access level:** Public read-only.

## Registration

No registration is required for public data. An anonymous identity type is advertised for agents that wish to self-identify:

- **Identity type:** `anonymous`
- **Credential type:** `none`
- **Registration endpoint:** `https://goldpricetoday-saudi.com/auth.md` (this document — no POST required)

## OAuth Discovery Documents

Although no auth is required, standard OAuth metadata is published for discovery:

- **Protected Resource Metadata (RFC 9728):** `https://goldpricetoday-saudi.com/.well-known/oauth-protected-resource`
- **Authorization Server Metadata (RFC 8414):** `https://goldpricetoday-saudi.com/.well-known/oauth-authorization-server`
- **OpenID Configuration:** `https://goldpricetoday-saudi.com/.well-known/openid-configuration`

## Supported Methods

| Method | Credential | Scope | Notes |
|--------|-----------|-------|-------|
| `anonymous` | none | `read:public` | Implicit grant to all requests |

## Credential Use

No credentials are issued or required. The `read:public` scope is granted implicitly to every request. Bearer tokens are accepted via the `Authorization: Bearer` header for forward compatibility but are not validated for public resources.

## Agent Capabilities

- **Agent Skills Index:** `https://goldpricetoday-saudi.com/.well-known/agent-skills/index.json`
- **API Catalog (RFC 9727):** `https://goldpricetoday-saudi.com/.well-known/api-catalog`
- **MCP Server Card:** `https://goldpricetoday-saudi.com/.well-known/mcp/server-card.json`

## Rate Limits

Public endpoints are served behind a CDN. Reasonable automated access is welcome. No hard rate limit is enforced for read-only requests.

---
_Last updated: 2026-10-06T09:41:27+03:00_