# pabloalbaladejo.com auth.md

## Who this is for
Any AI agent or program that reads this site.

## Authentication
None. Every endpoint listed here is public and read-only.
You do not need an account, an API key or a token.

## Registration
There is no registration or provisioning endpoint. You do not need to register.

## Supported methods
Anonymous HTTPS requests only. The site does not support OAuth, API keys or any other login.

## How credentials are used
They are not used. Do not send credentials. The site ignores them.

## Endpoints
- [JSON API (OpenAPI 3.1)](https://pabloalbaladejo.com/api/openapi.json)
- [API catalog](https://pabloalbaladejo.com/.well-known/api-catalog)
- MCP server: `https://agents.pabloalbaladejo.com/mcp` ([server card](https://pabloalbaladejo.com/.well-known/mcp/server-card.json))
- A2A agent: `https://agents.pabloalbaladejo.com/a2a` ([agent card](https://pabloalbaladejo.com/.well-known/agent-card.json))

All of them are public and read-only. None of them needs a credential.

## Limits
The JSON API is static. It never writes data or sends email.
The MCP server and the A2A agent read the same public files. They never change anything.
They allow about 2 requests per second, shared by everyone. Above that, they answer 429.