# JC MKT Digital auth.md

JC MKT Digital supports Auth.md standard agent registration discovery for AI agents, LLM assistants, and automated systems accessing marketing tools, APIs, and public resources.

## 1. Discovery Endpoints

Agents can discover authorization parameters from standard metadata documents:

- **Protected Resource Metadata (PRM)**: `https://jcmkt.digital/.well-known/oauth-protected-resource`
- **OAuth Authorization Server Metadata**: `https://jcmkt.digital/.well-known/oauth-authorization-server`
- **Auth.md Skill Documentation**: `https://jcmkt.digital/auth.md`

### 1a. Protected Resource Metadata (`/.well-known/oauth-protected-resource`)

```json
{
  "resource": "https://jcmkt.digital",
  "authorization_servers": ["https://jcmkt.digital"],
  "scopes_supported": ["public_read", "lead_create"],
  "bearer_methods_supported": ["header"],
  "resource_documentation": "https://jcmkt.digital/auth.md",
  "agent_auth_uri": "https://jcmkt.digital/.well-known/oauth-authorization-server"
}
```

### 1b. Authorization Server Metadata (`/.well-known/oauth-authorization-server`)

```json
{
  "issuer": "https://jcmkt.digital",
  "authorization_endpoint": "https://jcmkt.digital/auth",
  "token_endpoint": "https://jcmkt.digital/token",
  "registration_endpoint": "https://jcmkt.digital/api/agent/register",
  "grant_types_supported": ["client_credentials", "anonymous", "urn:ietf:params:oauth:grant-type:token-exchange"],
  "response_types_supported": ["token"],
  "scopes_supported": ["public_read", "lead_create"],
  "service_documentation": "https://jcmkt.digital/auth.md",
  "agent_auth": {
    "skill": "https://jcmkt.digital/auth.md",
    "register_uri": "https://jcmkt.digital/api/agent/register",
    "identity_types_supported": ["anonymous", "identity_assertion"],
    "anonymous": {
      "credential_types_supported": ["none", "bearer_token"]
    },
    "identity_assertion": {
      "assertion_types_supported": ["urn:ietf:params:oauth:token-type:id-jag", "verified_email"],
      "credential_types_supported": ["bearer_token"]
    },
    "claim_uri": "https://jcmkt.digital/auth.md",
    "revocation_uri": "https://jcmkt.digital/auth.md",
    "events_supported": ["revocation"]
  }
}
```

## 2. Agent Registration Flow & Methods

JC MKT Digital supports two agent registration types via `register_uri` (`POST https://jcmkt.digital/api/agent/register`):

### 2a. Anonymous Registration (`anonymous`)

For public read access and basic interaction. No prior identity verification required.

- **Supported Credential Types**: `none`, `bearer_token`
- **Request Payload**:
  ```json
  {
    "identity_type": "anonymous",
    "client_name": "MyAgent/1.0"
  }
  ```
- **Response**:
  ```json
  {
    "token_type": "Bearer",
    "access_token": "anonymous",
    "expires_in": 86400
  }
  ```

### 2b. Identity Assertion Registration (`identity_assertion`)

For authenticated access using trusted agent assertions.

- **Supported Assertion Types**:
  - `urn:ietf:params:oauth:token-type:id-jag` (Identity assertion for agent governance)
  - `verified_email` (Agent owner verified email assertion)
- **Supported Credential Types**: `bearer_token`
- **Request Payload (ID-JAG)**:
  ```json
  {
    "identity_type": "identity_assertion",
    "assertion_type": "urn:ietf:params:oauth:token-type:id-jag",
    "assertion": "<signed_jag_jwt_token>"
  }
  ```
- **Request Payload (Verified Email)**:
  ```json
  {
    "identity_type": "identity_assertion",
    "assertion_type": "verified_email",
    "email": "agent-admin@example.com",
    "claim_uri": "https://jcmkt.digital/auth.md"
  }
  ```

## 3. Credential Usage & Revocation

### Credential Presentation
Send issued tokens in HTTP request headers:

```http
GET https://jcmkt.digital/api/services
Authorization: Bearer <access_token>
Content-Type: application/json
```

### Claim & Revocation
- **Claim URI**: `https://jcmkt.digital/auth.md`
- **Revocation URI**: `https://jcmkt.digital/auth.md`
- **Events Supported**: `revocation`

To revoke an issued credential, submit a revocation request to the revocation endpoint or review the status at the claim/revocation URL.

## 4. Content Signals & Usage Policy

- `Content-Signal`: `search=yes, ai-train=no, use=reference`
- Retrieval-Augmented Generation (RAG) and real-time agent execution are permitted.
- Training on JC MKT Digital content is prohibited without permission.

## 5. Contact & Support

- Website: https://jcmkt.digital
- Contact: contato@jcmkt.digital