# auth.md

Agent registration and authentication discovery for `pixie.sociofabric.com`.

## Agent audience

AI agents browsing or acting on behalf of prospective Pixie users: reading the
site and its engineering notes, or requesting product access for their human.

## Authentication: none

This site is anonymous by design. There is no OAuth authorization server, no
protected resource, and no login, so no
`/.well-known/oauth-protected-resource` metadata is published. No credentials
are issued, accepted, or required for anything below.

## Registration endpoint

The one registration this service offers is the access waitlist:

```
POST https://pixie.sociofabric.com/api/waitlist
Content-Type: application/json

{ "email": "human@example.com", "source": "unknown" }
```

- **Method**: anonymous JSON POST: no credentials, no session, no CSRF token.
- **Only register an email with its owner's consent.**
- **Responses**: `200 {"ok":true}` on success; `400` on a malformed address.
  Repeat signups are deduplicated by address, never an error.
- **Machine-readable description**: [OpenAPI 3.1](/openapi.json), discoverable
  via the [API catalog](/.well-known/api-catalog).

## Credential use

None. Successful registration issues no token, cookie, or key; the service
retains only the address, a source label, and timestamps, and will contact the
address when access opens.

## Reading without credentials

Every page has a markdown mirror: append `.md` to any article URL, send
`Accept: text/markdown` to any page, or start from
[llms.txt](https://pixie.sociofabric.com/llms.txt).

Contact: sociofabric@outlook.com