# auth.md — Agent Authentication for digstraksi.com

## Audience

This document is for **AI agents** and automated clients that need to authenticate with the digstraksi.com API.

## Authorization

digstraksi.com uses **OAuth 2.0** with **Bearer Token** authentication.

- **Protected Resource Metadata:** https://digstraksi.com/.well-known/oauth-protected-resource
- **Authorization Server Metadata:** https://digstraksi.com/.well-known/oauth-authorization-server

## Registration

Agents can register for API credentials via **dynamic client registration** (RFC 7591):

- **Registration endpoint:** POST https://digstraksi.com/agent/auth
- **Method:** Dynamic Client Registration
- **Credentials returned:** Bearer access token

## Credential Use

Use the obtained bearer token in the Authorization header:

Authorization: Bearer <token>

## Scopes

- read — Read access to public API endpoints
- write — Write access (where applicable)

## Identity Types

- Anonymous — Agents may access public endpoints without prior identity. See the authorization server metadata for credential types.