# auth.md - Sheshani Electronics Agent Authentication & Registration

## 1. Overview & Public Access Policy

Sheshani Electronics (alsheshani.com) is an open electronics marketplace in Jordan.

- **Public Anonymous Access**: No API keys, credentials, or registration are required to query product search APIs or browse the catalogue.
- **Fair Use Rate Limiting**: Standard public queries are limited to 60 requests per minute per IP.
- **Service Endpoints**:
  - Search REST API: `GET https://alsheshani.com/api/products?q={query}`
  - Categories: `GET https://alsheshani.com/api/categories`
  - MCP Server: `POST https://alsheshani.com/mcp` (alias: `POST https://alsheshani.com/api/mcp`, JSON-RPC 2.0)
  - OpenAPI Specification (for ChatGPT Actions): `GET https://alsheshani.com/api/openapi.json`

## 2. Agent Registration & Discovery

AI agents wishing to obtain an anonymous session token or register programmatically may discover metadata at:
- **OAuth Protected Resource Metadata (RFC 9728)**: `https://alsheshani.com/.well-known/oauth-protected-resource`
- **OAuth Authorization Server Metadata (RFC 8414)**: `https://alsheshani.com/.well-known/oauth-authorization-server`
- **OpenID Connect Discovery**: `https://alsheshani.com/.well-known/openid-configuration`
- **API Catalog (RFC 9727)**: `https://alsheshani.com/.well-known/api-catalog`
- **MCP Server Card (SEP-1649)**: `https://alsheshani.com/.well-known/mcp/server-card.json`
- **ARD Capability Manifest**: `https://alsheshani.com/.well-known/ai-catalog.json`
- **OpenAPI 3.0.3 Specification**: `https://alsheshani.com/api/openapi.json`

## 3. Obtaining Anonymous Tokens

Agents can optionally request a client bearer token:
```http
POST https://alsheshani.com/api/auth/token
Content-Type: application/json

{"grant_type": "anonymous"}
```

Response:
```json
{
  "access_token": "public_anonymous_token",
  "token_type": "Bearer",
  "expires_in": 86400,
  "scope": "catalog:read mcp:call public"
}
```

## 4. Contact & Support
- Store: Sheshani Electronics (https://alsheshani.com/)
- Email: info@alsheshani.com
- Amman, Jordan