# Arssan Studio auth.md — AI Agent Registration & Access Guide

Welcome to **Arssan Studio (أرسان الكويت)** (`https://arssan.com`), the specialized web design and digital engineering arm of **Scptric**. This `auth.md` document defines how autonomous AI agents, crawlers, and LLM-driven assistants can discover, register, authenticate, and interact with Arssan Studio's digital resources and APIs.

---

## 1. Agent Audience & Access Policy

Arssan Studio provides web design (UI/UX), Next.js full-stack development, KNET/GCC e-commerce integration, and SEO engineering in Kuwait and the Gulf region.

- **Public Read Access**: All service catalogs, KWD pricing tiers, portfolio case studies, OpenAPI schemas, MCP server cards, and agent skills on `https://arssan.com` are **publicly accessible without mandatory authentication**.
- **Optional Agent Registration**: Agents that support standardized registration protocols (Auth.md, RFC 9728 OAuth Protected Resource Metadata, and RFC 8414 OAuth Authorization Server Metadata) may register to obtain an optional agent API key or bearer token for higher rate limits and structured inquiry submission.

---

## 2. Discovery Endpoints

- **Auth.md Document**: https://arssan.com/auth.md
- **OAuth Protected Resource Metadata (RFC 9728)**: https://arssan.com/.well-known/oauth-protected-resource
- **OAuth Authorization Server Metadata (RFC 8414)**: https://arssan.com/.well-known/oauth-authorization-server
- **OpenID Connect Discovery**: https://arssan.com/.well-known/openid-configuration
- **JWKS Endpoint**: https://arssan.com/.well-known/jwks.json
- **Agent Auth Skill**: https://arssan.com/.well-known/agent-skills/auth-md/SKILL.md
- **DNS for AI Discovery (DNS-AID) Skill**: https://arssan.com/.well-known/agent-skills/dns-aid/SKILL.md
- **DNS-AID Well-Known Records**: `_index._agents.arssan.com`, `_a2a._agents.arssan.com`, `_mcp._agents.arssan.com`
- **API Catalog (RFC 9727)**: https://arssan.com/.well-known/api-catalog
- **ARD Capability Manifest**: https://arssan.com/.well-known/ai-catalog.json
- **MCP Server Card**: https://arssan.com/.well-known/mcp/server-card.json

---

## 3. Agent Registration & Provisioning

### Registration Endpoint
- **URL**: POST https://arssan.com/api/agent/register
- **Claim URI**: POST https://arssan.com/api/agent/claim
- **Revocation URI**: POST https://arssan.com/api/agent/revoke

### Supported Identity & Credential Types
- **Identity Types Supported**: `anonymous`, `identity_assertion`
- **Assertion Types Supported**: `urn:ietf:params:oauth:token-type:id-jag`, `verified_email`
- **Credential Types Supported**: `api_key`, `bearer_token`
- **Bearer Methods Supported**: `header` (`Authorization: Bearer <token>`)
- **Scopes Supported**: `openid`, `profile`, `read`, `public`

### Example Registration Request
```http
POST /api/agent/register HTTP/1.1
Host: arssan.com
Content-Type: application/json

{
  "agent_name": "example-procurement-agent",
  "identity_type": "anonymous",
  "credential_type": "bearer_token",
  "scopes": ["read", "public"]
}
```

---

## 4. Direct Contact
- **Email**: [info@arssan.com](mailto:info@arssan.com)
- **WhatsApp**: [https://wa.me/46700265645](https://wa.me/46700265645)
- **Parent Organization**: [https://scptric.com](https://scptric.com)