# auth.md - Agent Authentication

Roundup publishes public website discovery resources for AI agents.

## Public resources

- Sitemap index: https://roundup-inc.co.jp/sitemap_index.xml
- Agent skills index: https://roundup-inc.co.jp/.well-known/agent-skills/index.json
- API catalog: https://roundup-inc.co.jp/.well-known/api-catalog
- MCP Server Card: https://roundup-inc.co.jp/.well-known/mcp/server-card.json

- Service MCP endpoint: https://roundup-service-mcp.bitter-sea-955b.workers.dev/mcp
- Service MCP server card: https://roundup-service-mcp.bitter-sea-955b.workers.dev/.well-known/mcp/server-card.json

## Protected access

The public service MCP is currently available as an unauthenticated experimental retrieval endpoint. It returns source URLs, snippets, and metadata for service, company, case, voice, and contact related content only. Production token issuance is not enabled from this document alone. Agents that need protected access should use the contact page for registration until a formal OAuth client registration flow is published.

## Agent registration

- Register URI: https://roundup-inc.co.jp/inq/
- Identity types supported: anonymous, identity_assertion
- Anonymous credential claim URI: https://roundup-inc.co.jp/inq/
- Identity assertion types supported: verified_email
- Credential types supported: oauth2-client, private-key-jwt

- OAuth Authorization Server Metadata: https://roundup-inc.co.jp/.well-known/oauth-authorization-server
- OAuth Protected Resource Metadata: https://roundup-inc.co.jp/.well-known/oauth-protected-resource
- Contact: https://roundup-inc.co.jp/inq/