# auth.md for Ricci Orthodontic Studio

This website publishes public resources for AI assistants and agents. It does not expose protected patient data, scheduling, payments, or account-specific APIs for autonomous agent access.

## Agent audience

Agents may use these public resources to answer general questions about Ricci Orthodontic Studio, discover public pages, and understand crawl preferences.

## Agent registration

Registration method: anonymous public access.

- skill: https://ricciorthodonticstudio.com/auth.md
- register_uri: https://ricciorthodonticstudio.com/agent/auth
- claim_uri: https://ricciorthodonticstudio.com/agent/auth/claim
- credential type: api_key
- credential use: no bearer token is required for public resources
- supported scopes: public:read

agent_auth:

```json
{
  "skill": "https://ricciorthodonticstudio.com/auth.md",
  "register_uri": "https://ricciorthodonticstudio.com/agent/auth",
  "claim_uri": "https://ricciorthodonticstudio.com/agent/auth/claim",
  "identity_types_supported": ["anonymous"],
  "anonymous": {
    "credential_types_supported": ["api_key"],
    "claim_uri": "https://ricciorthodonticstudio.com/agent/auth/claim"
  }
}
```

## Discovery metadata

- OAuth protected resource metadata: https://ricciorthodonticstudio.com/.well-known/oauth-protected-resource
- OAuth authorization server metadata: https://ricciorthodonticstudio.com/.well-known/oauth-authorization-server
- API catalog: https://ricciorthodonticstudio.com/.well-known/api-catalog
- Agent skills index: https://ricciorthodonticstudio.com/.well-known/agent-skills/index.json
- MCP server card: https://ricciorthodonticstudio.com/.well-known/mcp/server-card.json
- A2A agent card: https://ricciorthodonticstudio.com/.well-known/agent-card.json

## Boundaries

Agents must not attempt to access protected patient information or perform clinical, billing, or scheduling actions unless a human uses the public website contact methods directly. Respect robots.txt and the published Content-Signal directive.