# auth.md

Last updated: 2026-07-27

## Access model

Half Rare's public pages, discovery documents, API catalogue, site index, MCP tools, WebMCP context and Agent Skills are anonymous. They require no account, agent registration, OAuth grant, API key or bearer token.

Name Picker and Logo Maker also use anonymous, rate-limited compute behind their browser interfaces. These generation endpoints are not a general agent API and must not be called without the user's approval of the inputs and action.

## Registration and provisioning

No agent registration, provisioning or dynamic client-registration endpoint exists.

- `register_uri`: not available
- `provisioning_uri`: not available
- supported identity type: `anonymous`
- supported credential types: none

## Public methods

- `GET` and `HEAD` for public pages, documents and read-only discovery APIs
- `POST /mcp` for the read-only MCP JSON-RPC endpoint
- Browser-originated, rate-limited `POST` requests used by Name Picker and Logo Maker after a user starts generation

No credential is issued, accepted, refreshed or revoked. There is no protected public resource server or authorisation server, so OAuth, OpenID Connect and protected-resource metadata are not published.

## Human-authorised actions

An agent must obtain explicit approval before it:

- starts name or logo generation;
- submits an email address or any other personal data;
- records early-access interest;
- submits a Foundry application.

No checkout is currently open. Logo generation is free. A Blueprint registration is interest only, and a Foundry application is not an order.

## Help and policy

- Agent guide: https://halfrare.com/agent.md
- API documentation: https://halfrare.com/api-docs.md
- Privacy policy: https://halfrare.com/legal/privacy
- Terms: https://halfrare.com/legal/terms