# VIQQ auth.md

Agent registration and API access for [viqq.net](https://viqq.net).

## Agent registration {#agent-registration}

**Audience:** AI agents, crawlers, and automation tools that call VIQQ public informational APIs.

**Supported identity:** `anonymous` - no account, email, or API key is required for public endpoints.

| Step | Action |
|------|--------|
| 1 | Read this file and [OAuth Protected Resource Metadata](https://viqq.net/.well-known/oauth-protected-resource) |
| 2 | Optional: `POST https://viqq.net/api/agent/token` with `grant_type=none` for a capability token (not required) |
| 3 | Call public APIs without an `Authorization` header, or with `Authorization: Bearer anonymous` |

**Machine-readable registration**

- Register URI: `https://viqq.net/auth.md#agent-registration`
- Authorization server: [https://viqq.net/.well-known/oauth-authorization-server](https://viqq.net/.well-known/oauth-authorization-server)
- Protected resource: [https://viqq.net/.well-known/oauth-protected-resource](https://viqq.net/.well-known/oauth-protected-resource)
- JWKS: [https://viqq.net/.well-known/jwks.json](https://viqq.net/.well-known/jwks.json)
- Auth.md skill: [auth-md](https://isitagentready.com/.well-known/agent-skills/auth-md/SKILL.md)

**Credential types (anonymous):** `none` - send requests with no credentials.

**Human provisioning** (custom integrations, CRM access, project quotes):

- Email: [hello@viqq.net](mailto:hello@viqq.net)
- Phone: +1 305 645 6091
- WhatsApp: [https://wa.me/13056456091](https://wa.me/13056456091)
- Contact: [https://viqq.net/contact](https://viqq.net/contact)

## Public APIs - no registration required

| API | Method | Auth |
|-----|--------|------|
| Site assistant | `POST https://viqq.net/api/assistant` | None (anonymous) |
| Health check | `GET https://viqq.net/api/health` | None |
| API catalog | `GET https://viqq.net/.well-known/api-catalog` | None |
| OpenAPI (assistant) | `GET https://viqq.net/.well-known/openapi/assistant.json` | None |
| Agent token (optional) | `POST https://viqq.net/api/agent/token` | `grant_type=none` |
| Authorize (discovery) | `GET https://viqq.net/api/agent/authorize` | None |

Send JSON `{ "message": "your question" }` to the assistant endpoint (max 2000 characters per message).

## Machine-readable site guide

- [for-ai](https://viqq.net/for-ai) - plain-text facts for AI assistants
- [llms.txt](https://viqq.net/llms.txt) - plain-text LLM summary (same body)
- [Agent skills index](https://viqq.net/.well-known/agent-skills/index.json)
- [MCP server card](https://viqq.net/.well-known/mcp/server-card.json)

## Protected APIs - staff only

CRM and dashboard routes under `/api/*` (except `/api/assistant`, `/api/health`, `/api/agent/*`, and `/api/agent/markdown`) require a session cookie via `POST https://viqq.net/api/login`. These are for VIQQ staff only - not exposed through agent OAuth discovery.