{"agent_auth":{"skill":"Submit enquiry","register_uri":"mailto:hello@vengera.co.uk","methods":[{"type":"anonymous","name":"Read-only public access","description":"Agents may read all public content without registration. No credential required for GET requests.","identity_types_supported":["anonymous"],"anonymous":{"credential_types_supported":["none"]},"claim_uri":"https://vengera.co.uk/"},{"type":"email_manual","name":"Email registration","description":"Email hello@vengera.co.uk to request agent access. A real person reviews and issues a bearer token.","register_uri":"mailto:hello@vengera.co.uk","identity_types_supported":["email"],"credential_types_supported":["bearer_token"],"claim_uri":"https://vengera.co.uk/"}],"unauthenticated_endpoints":[{"path":"POST /__vengera/contact","description":"Submit an enquiry — no registration required","auth":"none","rate_limited":true}]}}

# auth.md

How automated agents register, authenticate, and interact with Vengera (https://vengera.co.uk).

## Agent Registration

AI agents can register and authenticate with Vengera to obtain a credential for
authenticated, programmatic, or bulk access. Registration associates an agent with a
responsible operator and issues that agent its own credential.

### How to register an agent

1. Email **hello@vengera.co.uk** to request agent access.
2. Include the agent's name, the operator (person or company) responsible for it, and
   what the agent intends to do.
3. On approval, Vengera issues a credential — a bearer token — for authenticated access.

A real person reviews and approves each registration request.

### Agent Registration URI

Registration is handled by email — there is no automated self-service portal:
`mailto:hello@vengera.co.uk`

### Authentication

Once registered, an approved agent authenticates by presenting its issued bearer token
on every request using the standard HTTP bearer-token scheme.

### Identity Types Supported

- `anonymous` — public read-only access requires no credential
- `email` — registers and identifies the agent's operator
- `bearer_token` — identifies an approved agent on authenticated requests

### Credential Types

- `none` — public content requires no credential
- `bearer_token` — issued by arrangement to approved, registered agents

## Public read access

Public content is fully open: agents may read the entire site without registering.
See `/robots.txt` and `/llms.txt` for what is available. Registration is required only
for authenticated, programmatic, or bulk access beyond ordinary public reading.

## Write capability — submit an enquiry

One **write** capability is available without registration: submitting an enquiry.

- **Endpoint:** `POST https://vengera.co.uk/__vengera/contact`
- **Body:** JSON or form fields — `name`, `email`, `message`
- **Auth:** none required. Rate-limited and anti-spam protected.

## Contact

- Email: hello@vengera.co.uk
- Operator: Vengera — Long Eaton, East Midlands, United Kingdom