# Elucidsoft LLC auth.md

Authentication and authorization discovery document for Elucidsoft LLC (`elucidsoft.com`) and associated services.

## Overview

This document describes the OAuth discovery metadata published for APIs and services under Elucidsoft LLC.

- **Issuer / Authorization Server:** https://elucidsoft.com
- **Protected Resource:** https://elucidsoft.com
- **Protected Resource Metadata (PRM):** https://elucidsoft.com/.well-known/oauth-protected-resource
- **Authorization Server Metadata (ASM):** https://elucidsoft.com/.well-known/oauth-authorization-server
- **API Catalog (RFC 9727):** https://elucidsoft.com/.well-known/api-catalog

The ASM currently publishes only an issuer identity and the scopes listed below. It does not yet publish an authorization endpoint, a token endpoint, or a registration endpoint, and no working OAuth token-issuance flow runs on this domain today.

## Agent Registration & Identity Flows

Elucidsoft LLC operates `elucidsoft.com` as a static site. It does not run an agent self-registration, credential-issuance, or revocation endpoint. There is no `/agent/register`, `/agent/claim`, or `/agent/revoke` route, and no identity-assertion, verified-email, or anonymous-access flow issues credentials today.

The PRM and ASM documents linked above describe protected-resource and authorization-server discovery only. An agent or tool reading this file should treat the scopes below as declarative, not as evidence of a working registration or token-issuance flow.

## Scopes Supported

- `read`: Read access to public company facts, news, and portfolio metadata.
- `write`: Submission of contact forms and enterprise inquiries.
- `agent:read`: Autonomous agent retrieval of OpenAPI specifications, API catalogs, and schemas.
- `agent:write`: Autonomous agent provisioning and registration operations.

## Bearer Token Usage

This section describes the wire format a client would use once a token exists. No endpoint on this domain issues one today.

Include the issued bearer token in the HTTP `Authorization` header:

```http
Authorization: Bearer <token>
```