# auth.md

## Audience and resource

For agents reading the public portfolio at <https://lucataco.com>.
All portfolio documents, discovery catalogs, contact information, and the
resume are publicly accessible.

## Access and registration

Use ordinary HTTPS GET requests. Registration and account provisioning are
not required. No registration endpoint is offered, and no credentials are
issued. Do not send an Authorization header or request an access token.

```http
GET /index.md HTTP/1.1
Host: lucataco.com
Accept: text/markdown
```

The site has no protected APIs, OAuth/OIDC authorization server, supported
OAuth scopes, or agent identity/credential registration methods. Consequently,
OAuth discovery and protected-resource metadata are not published. There are
no credential claim or revocation endpoints.

## Available capabilities

- [Public resource documentation](https://lucataco.com/developers.md)
- [API catalog](https://lucataco.com/.well-known/api-catalog)
- [AI capability catalog](https://lucataco.com/.well-known/ai-catalog.json)
- [Contact skill](https://lucataco.com/.well-known/agent-skills/contact/SKILL.md)

On supported browsers, the homepage exposes read-only WebMCP tools for the
profile, published links, and resume URL. They require no registration.
There is no remote MCP server.

External sites linked from this portfolio have their own authentication
requirements. For questions about this site, contact <mailto:me@lucataco.com>.