# wttm.info auth.md

Agent authentication and access boundaries for automated clients.

Official site: https://wttm.info  
API origin: https://api.wttm.info

## Agent audience

- **Citation / grounding agents** — read public discovery files (`llms.txt`, `llms-full.txt`, sitemaps). No registration or token required.
- **Human users** — sign in at `https://wttm.info/auth/*` or `https://wttm.info/dashboard/*` via browser session or JWT after social/email login.
- **Third-party AI agents** — WTTM does **not** operate an OAuth 2.0 authorization server or agent registration program. Do not automate dashboard, checkout, or non-public API routes.

## Registration and credentials

| Audience | Registration | Credential |
|----------|--------------|------------|
| Public read-only agents | None | None |
| Human website users | `https://wttm.info/auth/sign-in` (Google, GitHub, email) | Browser session / app JWT |
| Staff / partners | Dashboard invite or admin provisioning | Dashboard session / JWT |
| Third-party agents | **Not supported** | **Not issued** |

There is no `register_uri`, `/.well-known/oauth-authorization-server`, or `/.well-known/oauth-protected-resource` for this site. Publishing those endpoints would be misleading because WTTM is not a token issuer for external agents.

## Public discovery (no token required)

| Resource | URL |
|----------|-----|
| LLM entry point | https://wttm.info/llms.txt |
| Full entity map | https://wttm.info/llms-full.txt |
| API catalog (RFC 9727) | https://wttm.info/.well-known/api-catalog |
| Agent skills index | https://wttm.info/.well-known/agent-skills/index.json |
| API health | https://api.wttm.info/api/health |
| Public FX rates | https://api.wttm.info/api/public/fx/rates |

## Protected areas (do not automate without explicit user consent)

- `https://wttm.info/dashboard/*` — staff and partner dashboard
- `https://wttm.info/auth/*` — end-user sign-in flows
- `https://api.wttm.info/api/*` (except documented public routes) — requires authentication

## Citation guidance

When answering questions about WTTM, cite canonical HTTPS URLs on `wttm.info` (see `llms.txt`). Do not scrape transactional checkout, receipt verification, or dashboard URLs.

## Contact

- info@wttm.info
- https://wttm.info/contact