# Auth.md

This file explains agent authentication and registration status for TheBougees.

## Step 1 - Discover

TheBougees public storefront pages do not require authentication.

Agent registration audience:
- Approved API and commerce partners
- AI agents acting for a user under a separately approved partnership

## Step 2 - Pick a method

TheBougees does not currently support automatic public agent registration.

Supported registration methods:
- manual-partner-provisioning: available by request
- agent-verified: not automatically available
- user-claimed-anonymous-start: not available
- user-claimed-email-required: not available

Agents may access public product, collection, blog, sitemap, and policy pages when allowed by robots.txt.

## Step 3 - Register

Registration and provisioning endpoint:
https://www.thebougees.com/pages/contact

Submit a manual API or commerce partnership request through the contact page. Approval is reviewed by TheBougees and is not automatic.

### Agent registration metadata

```json
{
  "agent_auth": {
    "skill": "https://www.thebougees.com/auth.md",
    "register_uri": "https://www.thebougees.com/pages/contact",
    "registration_methods_supported": ["manual_partner_provisioning"],
    "identity_types_supported": ["approved_partner"],
    "credential_types_supported": ["partner_credential_if_approved"],
    "claim_uri": null,
    "revocation_uri": "https://www.thebougees.com/pages/contact"
  }
}
```

## Step 4 - Claim ceremony

No automated claim URI or claim ceremony is currently available. If a partnership is approved, TheBougees will provide the applicable onboarding instructions directly.

## Step 5 - Use the credential

Credential types:
- Public storefront access: no credential required
- Approved partner access: credentials and allowed uses are provided directly under the approved partnership

Do not send a credential to public storefront pages unless the approved onboarding instructions explicitly require it.

## Errors

If an agent requires protected API access, it should stop and direct the user to contact TheBougees.

## Revocation

No public automated revocation URI is currently available. Approved partners should request credential revocation through the same provisioning endpoint:
https://www.thebougees.com/pages/contact

## Contact

For API, commerce, or partnership access, contact TheBougees through the website contact page.