# JSter auth.md

JSter exposes public, read-only catalog pages and API endpoints for agents.

## Agent Registration

Agent registration is not required for the public catalog API. Agents may access catalog resources anonymously.

## Anonymous Access

Supported identity type: anonymous.

Supported credential type: none.

Required scope: catalog:read.

## Authorization

OAuth/OIDC credentials are not issued because the catalog API does not require authentication.

## Tokens

Access tokens are not required for public catalog reads.

Useful discovery resources:

- `/.well-known/api-catalog`
- `/.well-known/openapi.json`
- `/.well-known/oauth-authorization-server`
- `/.well-known/oauth-protected-resource`
- `/catalog/`