# auth.md — JewishMythology.com agent authentication

## Audience

AI agents, crawlers, and automated clients that want to **read** JewishMythology.com or call its **public Maggid / search APIs**.

## Authentication posture

**No authentication is required** for ordinary site pages or the public JSON APIs listed below.

| Surface | Auth | Notes |
|---------|------|-------|
| HTML myth/theme/source pages | None | Free open reference library |
| `GET /llms.txt`, `/llms-full.txt`, `/sitemap.xml` | None | Discovery + crawl |
| `POST /api/v1/semantic-search` | None | Vector search (`/api/semantic-search` alias) |
| `POST /api/v1/ai-search` | None | Maggid RAG (`/api/ai-search` alias) |
| `POST /api/v1/chat` | None | Maggid chat (`/api/chat` alias) |
| `GET /openapi.json` | None | OpenAPI 3.1 contract |
| `GET /.well-known/api-catalog` | None | RFC 9727 catalog |
| `GET /api/v1/status` | None | Liveness (`/api/status` alias) |
| `GET /docs` | None | Public API docs |

There is **no** OAuth authorization server, **no** API keys, **no** bearer tokens, and **no** agent registration endpoint for content access. Do not expect `401` or `WWW-Authenticate` on successful public routes.

Admin OAuth (`/api/admin/login`, `/api/admin/callback`) is **retired** (HTTP 410). It is not available for agent registration.

## How to call the APIs

1. Read the docs: [Public API](https://jewishmythology.com/docs)
2. Read the contract: [OpenAPI](https://jewishmythology.com/openapi.json)
3. Discover endpoints: [api-catalog](https://jewishmythology.com/.well-known/api-catalog)
4. `POST` JSON to `/api/v1/…` with `Content-Type: application/json`
5. Keep `query` ≤ 500 characters
6. Failed calls return RFC 9457 `application/problem+json` (not HTML). GET on a POST-only path is `405` with `Allow: POST, OPTIONS`
7. Rate limit is 60 requests per 60 seconds per IP (`RateLimit` / `RateLimit-Policy` headers). On `429`, honor `Retry-After`

Example:

```http
POST /api/v1/semantic-search HTTP/1.1
Host: jewishmythology.com
Content-Type: application/json

{"query":"Who is Lilith?","topK":5}
```

## Registration methods

**None for public access.** There is nothing to register.

If you need a human partnership, commercial license change, or a future authenticated agent program, see [Contact](https://jewishmythology.com/contact) or email `arthur.sabintsev@gmail.com`. That path is human email only, not machine registration.

## Content usage preferences

See `robots.txt` Content-Signal:

- `search=yes` — search indexing allowed
- `ai-input=yes` — retrieval / RAG / generative input allowed for allowed crawlers
- `ai-train=no` — foundation-model training crawlers are blocked (also explicit `Disallow` for CCBot, Bytespider, etc.)

## Related discovery

- [Public API docs](https://jewishmythology.com/docs)
- [llms.txt](https://jewishmythology.com/llms.txt)
- [Agent skills index](https://jewishmythology.com/.well-known/agent-skills/index.json)
- [Homepage markdown alternate](https://jewishmythology.com/index.md)