# Auth.md

_Authentication for agents at talkshell.app._

**Nothing on this site requires authentication.** Every page, product fact, and
machine-readable document is public and unmetered. If you are an agent deciding
whether you need credentials: you do not.

## Agent registration

**No registration.** There is no developer portal, no client id, no client
secret, no API key, and no allowlist. An agent does not sign up, does not
request credentials, and does not need approval before calling anything on this
domain.

If you are looking for where to register: you are done. Call the endpoint.

| Question | Answer |
|---|---|
| Do I need to register an agent identity? | No |
| Is there an OAuth authorization server? | No. Nothing here is protected, so there is nothing to authorize. |
| Is there a client id or API key? | No |
| Are there per-agent quotas? | No published limits. The site is static files on a CDN. |
| Do I need to identify myself in a User-Agent? | Not required, though a descriptive one is appreciated. |
| Is there a sandbox or test mode? | Not needed. Every endpoint is read-only apart from checkout, which is hosted by Stripe. |

Registration exists in exactly one place, and it is not an agent concern: after
a human completes checkout, the email they used is invited to a private GitHub
repository. That invitation is the only account in the system.

## What is open

| Path | What it is | Auth |
|---|---|---|
| `/` | Landing page. Send `Accept: text/markdown` for Markdown. | none |
| `/index.md` | Landing page as Markdown | none |
| `/llms.txt` | Short product summary for language models | none |
| `/llms-full.txt` | Full documentation, prices, requirements, limitations | none |
| `/products.json` | Product and price as JSON | none |
| `/openapi.json` | OpenAPI 3.1 description of these endpoints | none |
| `/mcp` | MCP server, streamable HTTP. Read-only tools. | none |
| `/a2a` | A2A JSON-RPC endpoint | none |
| `/.well-known/*` | Discovery documents | none |

## Buying

Purchase runs through Stripe Checkout. You are handed a hosted Stripe URL and
the card details are entered there, by the human, on Stripe's domain. This site
never sees or stores a card number, and no API key of ours is needed to start a
checkout.

**Agents should not enter payment details.** Surface the checkout URL to the
person you are working for and let them complete it. That is a decision with
their money attached.

## After buying

Repo access is granted by invitation to a private GitHub repository, sent to the
email used at checkout. There is no API key to provision and no token to rotate.
Once you have access, `git clone` and read `CLAUDE.md`, which is written for you
rather than for a human.

## Rate limits

None published. Be reasonable. The whole site is static files on a CDN, so
crawling it costs nothing.

## Contact

The address is on the landing page. For questions about the source after
purchase, open an issue in the private repository so the answer helps the next
buyer.