# auth.md - Structurell API Authentication

Structurell APIs use OAuth 2.0 bearer tokens issued by the API service.

## Agent registration

Agents can discover registration and credential requirements from this document and the OAuth metadata below. Structurell currently provisions OAuth clients through the normal Structurell administration workflow rather than anonymous public self-service registration.

Discovery:

- Authorization server: https://api.structurell.com/.well-known/oauth-authorization-server
- Protected resource metadata: https://api.structurell.com/.well-known/oauth-protected-resource
- API catalog: https://api.structurell.com/.well-known/api-catalog
- OpenAPI description: https://api.structurell.com/openapi.json

Agents should request the smallest required scope for the action they need to perform and send tokens in the `Authorization: Bearer` header.