# auth.md - BharathRise AI Agent Registration & Auth Guide

> This document describes the authentication, discovery, and registration protocols for AI agents interacting with BharathRise.com services.

## Agent Audience & Public Access
- BharathRise.com welcomes all autonomous AI agents, web crawlers, LLMs, and search assistants.
- **Public Read Access**: All public data, country destination guides, knowledge hub articles, daily blog updates, and zero-fee service descriptions are accessible without authentication headers.
- **Rate Limit**: 120 requests per minute per IP address.

## OAuth Protected Resource Metadata
- **Protected Resource Endpoint**: `https://bharathrise.com/.well-known/oauth-protected-resource`
- **Authorization Server**: `https://bharathrise.com`
- **Supported Scopes**: `read:services`, `read:knowledge`, `write:counselling_booking`
- **Bearer Methods Supported**: `header`

## OAuth Authorization Server & Agent Auth
- **Metadata Endpoint**: `https://bharathrise.com/.well-known/oauth-authorization-server`
- **Agent Auth Registration URI**: `https://bharathrise.com/agent/register`
- **Supported Identity Types**: `anonymous`, `identity_assertion`
- **Supported Assertion Types**: `verified_email`, `urn:ietf:params:oauth:token-type:id-jag`

## Agent Credential Use & Registration Flow
1. Agents submitting student profile evaluations or counselling bookings on behalf of human users identify themselves via standard user-agent strings or HTTP Bearer headers.
2. Zero-fee counselling bookings are confirmed instantly via Calendly and WhatsApp notification APIs.
3. For registration inquiries or bot verification key management, contact: connect@bharathrise.com