# VEducate Academy auth.md — Agent Authentication & Discovery Policy

Welcome to the automated agent and machine-readable authentication discovery document for VEducate Academy and ZapSkill educational resources.

## 1. Intended Agent Audience

This policy applies to automated AI agents, large language model (LLM) assistants, educational search indexers, semantic crawlers, and programmatic API clients discovering public educational curricula, engineering lab frameworks, accreditation documentation, and publication repositories hosted at `https://veducateacademy.com`.

## 2. Public Content & Authentication Requirements

- **Public Website & Publications**: All educational articles, curriculum comparison guides, accreditation whitepapers (ABET/NBA/NAAC), author directories, and public blog endpoints require **NO authentication**. They are openly accessible to all automated agents and web indexers.
- **Search & Indexing Permissions**: In accordance with our `robots.txt` Content Signals (`Content-Signal: ai-train=no, search=yes, ai-input=no`), agents may crawl, index, and reference all public publications and curriculum resources for search and retrieval purposes.

## 3. Agent Registration & Provisioning Status

- **Agent Registration Currently Offered**: **No**. VEducate Academy does not currently offer automated self-service agent registration, programmatic client-credential issuance, or dynamic API token provisioning.
- **Registration Endpoints**: There are no public agent registration endpoints (`/agent/auth`, `/api/register`, or similar) available on this platform.
- **Human Administrative Access Only**: Authentication infrastructure on this site (via Supabase Auth at `/admin/login`) is strictly designated for authorized human faculty, institutional administrators, and editorial personnel. It is not an agent-provisioning or public token-granting endpoint.

## 4. Supported Authentication Methods

- **Public Endpoints**: Anonymous / Unauthenticated HTTP requests.
- **Private Editorial Endpoints**: Standard HTTP Bearer tokens (`Authorization: Bearer <token>`) are supported exclusively for authenticated administrative users managing publications and media assets.

## 5. Machine-Readable Discovery Resources

- **API Catalog (RFC 9727)**: [`https://veducateacademy.com/.well-known/api-catalog`](https://veducateacademy.com/.well-known/api-catalog)
- **OpenAPI 3.1 Specification**: [`https://veducateacademy.com/openapi.json`](https://veducateacademy.com/openapi.json)
- **Public API Documentation**: [`https://veducateacademy.com/api-docs`](https://veducateacademy.com/api-docs)
- **Robots Policy & Content Signals**: [`https://veducateacademy.com/robots.txt`](https://veducateacademy.com/robots.txt)
- **Sitemap Index**: [`https://veducateacademy.com/sitemap.xml`](https://veducateacademy.com/sitemap.xml)
- **RSS Feed**: [`https://veducateacademy.com/blog/rss.xml`](https://veducateacademy.com/blog/rss.xml)

## 6. Contact & Inquiries

For institutional partnerships, automated integration requests, or API access inquiries, please visit [`https://veducateacademy.com/contact`](https://veducateacademy.com/contact).