# auth.md — Marinefill Agent Registration

> Machine-readable authentication instructions for AI agents and bots.
> Spec: https://github.com/workos/auth.md

## Agent Auth Metadata

```json
{
  "agent_auth": {
    "register_uri": "https://marinefill.com/register",
    "identity_types_supported": ["email"],
    "credential_types_supported": ["password", "magic_link"],
    "claims_uri": "https://evnxrdihuwsmanpauyge.supabase.co/auth/v1/user",
    "revocation_uri": "https://evnxrdihuwsmanpauyge.supabase.co/auth/v1/logout",
    "authorization_server": "https://evnxrdihuwsmanpauyge.supabase.co/auth/v1",
    "protected_resource": "https://marinefill.com",
    "scopes_supported": ["openid", "email", "profile"],
    "grant_types_supported": ["authorization_code", "password", "refresh_token"]
  }
}
```

## Quick Reference

| Endpoint | URL |
|----------|-----|
| OIDC Discovery | `https://marinefill.com/.well-known/openid-configuration` |
| OAuth Auth Server | `https://marinefill.com/.well-known/oauth-authorization-server` |
| Protected Resource | `https://marinefill.com/.well-known/oauth-protected-resource` |
| Authorization | `https://evnxrdihuwsmanpauyge.supabase.co/auth/v1/authorize` |
| Token | `https://evnxrdihuwsmanpauyge.supabase.co/auth/v1/token` |
| JWKS | `https://evnxrdihuwsmanpauyge.supabase.co/auth/v1/.well-known/jwks.json` |
| User Info | `https://evnxrdihuwsmanpauyge.supabase.co/auth/v1/user` |
| Register | `https://marinefill.com/register` |

## Grant Types

- `authorization_code` — Standard OIDC flow
- `password` — Direct credential exchange (trusted agents)
- `refresh_token` — Token renewal

## Scopes

| Scope | Description |
|-------|-------------|
| `openid` | Basic OIDC identity |
| `email` | User email address |
| `profile` | User profile |

## Token Usage

```http
Authorization: Bearer <supabase-jwt-token>
```

## Public Endpoints (No Auth Required)

- `GET /` — Homepage
- `GET /rfq` — RFQ form
- `GET /blog/` — Blog
- `GET /sitemap.xml` — Sitemap
- `GET /robots.txt` — Crawl rules
- `GET /.well-known/api-catalog` — API catalog
- `GET /openapi.json` — OpenAPI spec
- `GET /index.md` — Markdown homepage (Accept: text/markdown)

## Protected Endpoints

- `GET /dashboard` — User dashboard (Bearer token required)
- `GET /admin` — Admin panel (admin role required)

## Contact

info@marinefill.com