# auth.md — Emir Karasakal Agent Authentication & Registration

Official machine-readable authentication discovery and agent registration specification for https://emirkarasakal.com.

## Agent Audience

This authentication interface is designed for AI agents, automated LLM tools, research crawlers, and API clients interacting with Emir Karasakal's portfolio, filmography data, and technical direction services.

- **Public Access:** All portfolio projects, film credits, and media files are publicly readable without authentication.
- **Agent Access:** Autonomous agents may register to obtain credentials for high-throughput rate tiers and structured metadata querying.

## Registration Endpoints

- **Provisioning Endpoint:** https://emirkarasakal.com/agent/auth
- **Claim Endpoint:** https://emirkarasakal.com/agent/claim
- **Revocation Endpoint:** https://emirkarasakal.com/agent/revoke

## Supported Registration Methods

### 1. Anonymous Registration
- **Identity Type:** anonymous
- **Credential Types Supported:** bearer_token, api_key
- **Registration Endpoint:** https://emirkarasakal.com/agent/auth
- **Claim Endpoint:** https://emirkarasakal.com/agent/claim

### 2. Verified Email Assertion
- **Identity Type:** identity_assertion
- **Assertion Type:** verified_email
- **Credential Types Supported:** bearer_token, api_key
- **Claim Endpoint:** https://emirkarasakal.com/agent/claim

### 3. Identity Assertion (ID-JAG / OIDC)
- **Identity Type:** identity_assertion
- **Assertion Type:** urn:ietf:params:oauth:token-type:id-jag
- **Credential Types Supported:** bearer_token, api_key
- **Claim Endpoint:** https://emirkarasakal.com/agent/claim
- **Revocation Endpoint:** https://emirkarasakal.com/agent/revoke

## Credential Usage

Authenticate API requests using standard HTTP headers:

```http
Authorization: Bearer <token>
```

Or via API key header:

```http
X-API-Key: <api_key>
```

## Discovery Metadata

- **OAuth Protected Resource Metadata (PRM):** https://emirkarasakal.com/.well-known/oauth-protected-resource
- **OAuth Authorization Server Metadata:** https://emirkarasakal.com/.well-known/oauth-authorization-server
- **OpenID Connect Configuration:** https://emirkarasakal.com/.well-known/openid-configuration
- **API Catalog:** https://emirkarasakal.com/.well-known/api-catalog
- **LLM Profile:** https://emirkarasakal.com/llms.txt
- **Markdown Mirror:** https://emirkarasakal.com/index.md