# auth.md

Agent authorization descriptor for `unujwal.com`.
Spec: <https://github.com/workos/auth.md>

## Site

- **name:** unujwal.com
- **owner:** Ujwal Chaudhari
- **contact:** ujwalc3@gmail.com
- **type:** personal portfolio + writing archive
- **posture:** fully public, read-only

## Agent registration

Registration is **not required**. This site publishes no protected resources.

```yaml
agent_auth:
  policy: open-read
  register_uri: null            # no registration flow
  register_required: false
  supported_identity_types: []  # anonymous access is permitted
  supported_credential_types: []
  claim_uri: null
  revocation_uri: null
  rate_limit:
    unauthenticated: crawl-politely  # no enforced per-IP cap
  scopes_supported: []
  contact: mailto:ujwalc3@gmail.com
```

## Authentication

None. All URLs on `unujwal.com` (and its subdomains listed in `sitemap.xml`) return content to any client without credentials.

## Machine-readable discovery surface

| Resource                                     | Purpose                                  |
| -------------------------------------------- | ---------------------------------------- |
| `/robots.txt`                                | Crawl rules + Content Signals            |
| `/sitemap.xml`                               | URL inventory                            |
| `/index.md`                                  | Markdown mirror of the homepage          |
| `/.well-known/agent-skills/index.json`       | Skills discovery index (v0.2.0)          |
| `/.well-known/api-catalog`                   | RFC 9727 API catalog (linkset)           |
| `/auth.md`                                   | This file                                |

WebMCP tools (`getBio`, `listWriting`, `listProjects`, `listExperience`, `getContact`, `navigateTo`) are exposed in-page via `navigator.modelContext.provideContext()` for browser-based agents.

## If protected resources are added later

The following files will be published when (and if) protected APIs go live:

- `/.well-known/oauth-authorization-server` — RFC 8414 metadata with an `agent_auth` block
- `/.well-known/oauth-protected-resource` — RFC 9728 protected resource metadata
- OpenID Connect discovery at `/.well-known/openid-configuration` if OIDC is chosen

Until then, none of the above exist by design — the site is public.

## Contact for authorization questions

- Email: `ujwalc3@gmail.com`
- LinkedIn: <https://www.linkedin.com/in/unujwal>