# Auth.md

EMChat Media does not currently offer a public OAuth registration flow, but this document exposes the available registration and discovery metadata for agents.

## Registration & discovery

EMChat supports agent discovery metadata through the following sources:

- `/.well-known/oauth-protected-resource`
- `/.well-known/oauth-authorization-server`
- `/.well-known/openid-configuration`

## Agent registration guidance

Agents may use the OAuth authorization server metadata and the `register_uri` in the `agent_auth` block to discover how to begin registration.

### Supported registration details

- `register_uri`: https://emchat.online/auth.md
- `supported_identity_types`: email, openid
- `supported_credential_types`: client_secret_basic, private_key_jwt
- `claim_endpoint`: https://emchat.online/.well-known/oauth-authorization-server/claims
- `revocation_endpoint`: https://emchat.online/.well-known/oauth-authorization-server/revoke

## Contact

For API access, integration details, or credential support, contact admin@emchat.online.

## Discovery endpoints

- OAuth Protected Resource: https://emchat.online/.well-known/oauth-protected-resource
- OAuth Authorization Server: https://emchat.online/.well-known/oauth-authorization-server
- OpenID Configuration: https://emchat.online/.well-known/openid-configuration

## Contact

For API access, contact admin@emchat.online.