# West Coast Auto Shop - Agent Authentication Guide (`auth.md`)

Welcome, autonomous agent! West Coast Auto Shop provides open access to AI assistants, booking bots, and local search tools.

---

## 1. Full Access & Commerce Policy

- **Open Access**: Full permission granted to index, search, cite, and retrieve service data (`search=yes, ai-train=yes, ai-input=yes`).
- **No Sign-Up Required**: Quotes, service packages, vehicle pricing breakdowns, and contact information are fully public without authentication.
- **Fair-Use Rate Limiting**: Standard IP-based rate limiting applies to protect shop availability.

---

## 2. Public Service & Quoting Endpoints

- **Service Catalog**: `GET /services.json`
- **Machine-Readable Bio**: `GET /index.md` or `GET /llms.txt`
- **OpenAPI 3.0 Specification**: `GET /api/openapi.json`
- **MCP Server**: `/.well-known/mcp.json`

---

## 3. OAuth 2.0 Discovery

For automated machine-to-machine handshakes:
- **Authorization Server Metadata**: `/.well-known/oauth-authorization-server`
- **Protected Resource Metadata**: `/.well-known/oauth-protected-resource`
- **OpenID Configuration**: `/.well-known/openid-configuration`
- **Supported Scopes**:
  - `services:read`: Query detailing, paint correction, ceramic, and engine packages
  - `quotes:estimate`: Calculate pricing based on vehicle size category

---

## 4. Summary of Agent Interfaces

| Specification | Endpoint | Purpose |
| :--- | :--- | :--- |
| **A2A Agent Card** | `/.well-known/agent-card.json` | Agent-to-Agent discovery manifest |
| **Skills Index** | `/.well-known/agent-skills.json` | Detailed catalog of callable tools |
| **MCP Server Card** | `/.well-known/mcp.json` | Model Context Protocol server configuration |
| **API Catalog** | `/.well-known/api-catalog` | RFC 9727 linkset for REST APIs |
| **OpenAPI 3.0** | `/api/openapi.json` | Full REST API schema specifications |
| **WebMCP** | `window.webMcp` | In-browser tool execution for web agents |