# Nas.com Agent Authentication

Nas.com currently exposes public agent discovery as read-only, unauthenticated resources. AI agents can read public product guidance, public page context, OpenAPI discovery metadata, and MCP resources without obtaining credentials.

## Discover

Start with the public discovery resources:

- `https://nas.com/llms.txt`
- `https://nas.com/developers.md`
- `https://nas.com/openapi.json`
- `https://nas.com/mcp`
- `https://nas.com/api/agent/page-context?path=/`
- `https://nas.com/.well-known/agent-card.json`
- `https://nas.com/.well-known/mcp/server-card.json`

## Pick a method

Use unauthenticated public read-only access for public discovery. Nas.com does not currently publish authenticated agent access, OAuth metadata, self-serve API keys, or MCP write tools.

## Register

No agent registration endpoint is available for public use. Do not invent a `register_uri`, API key flow, OAuth application flow, webhook registration flow, or seller/admin integration.

## Claim

No public credential claim endpoint is available. Agents should not ask users for Nas.com credentials or attempt to exchange identity assertions with Nas.com unless a future authenticated contract is published.

## Use the credential

No credential is required for public discovery resources. If a task requires private user, seller, admin, checkout, payment, or member-only data, agents should say that public agent access is not available for that workflow.

## Errors

Public page-context requests can return JSON errors when a route is private, unsupported, or unavailable as public context. Agents should treat those errors as a boundary and avoid retrying with private paths.

## Revocation

There are no public agent credentials to revoke. Future authenticated agent access should publish revocation guidance before credentials are issued.

## agent_auth

Current status: public read-only discovery only.

- `status`: `public_read_only_discovery`
- `identity_types_supported`: `anonymous`
- `credential_types_supported`: none
- `oauth_client`: not available
- `register_uri`: not available
- `claim_uri`: not available
- `revocation_uri`: not available
- `skill`: `https://nas.com/.well-known/agent-skills/nas-com-discovery/SKILL.md`

No public OAuth client, API key, bearer token, cookie, password, or seller/admin credential is required or accepted for public agent discovery.