# auth.md

Agent-Ready Check is a public, read-only service. **No registration and no
credentials are required** to use any of its endpoints.

## For agents

| Endpoint | Authentication |
| --- | --- |
| `POST https://agent-ready.t0ols.com/api/scan` | none — public |
| `POST https://agent-ready.t0ols.com/mcp` | none — public |
| `GET https://agent-ready.t0ols.com/api/health` | none — public |

## Policy

- Every endpoint is read-only and idempotent.
- No API keys are issued and there is no registration flow to complete.
- Scans are rate limited per source address; a `429` response means retry with backoff.
- Requests are not attributed to an account and results are not stored.

If you operate an agent and need a stable integration, the MCP server card at
`https://agent-ready.t0ols.com/.well-known/mcp/server-card.json` is the machine-readable entry point.