# Agent Authentication — Franchise Success Directory

This document tells AI agents how to authenticate with
`https://franchisesuccessdirectory.com`.

## Public access (no authentication)

Most of this site is public and requires **no credentials**. Agents may read:

- `https://franchisesuccessdirectory.com/llms.txt` — site and content guide
- `https://franchisesuccessdirectory.com/sitemap.xml` — all public pages
- `https://franchisesuccessdirectory.com/.well-known/api-catalog` — machine-readable
  catalog of public resources
- `https://franchisesuccessdirectory.com/.well-known/agent-skills/index.json` — agent skills index
- The public directory, franchise opportunities, and news pages

Content usage preferences are declared in `robots.txt` via
`Content-Signal: search=yes, ai-input=yes, ai-train=no`.

## Authenticated access

Authenticated areas (partner dashboards, franchise dashboards, admin) are for
human account holders. Authentication is provided by the site's hosted identity
service.

- Authorization server metadata:
  `https://franchisesuccessdirectory.com/.well-known/oauth-authorization-server`
- Protected resource metadata:
  `https://franchisesuccessdirectory.com/.well-known/oauth-protected-resource`
- Issuer: `https://pdmheobmnjtdcbdbwayl.supabase.co/auth/v1`
- Flow: OAuth 2.0 / OpenID Connect authorization code with PKCE (`S256`)
- Scopes: `openid`, `profile`, `email`, `offline_access`

## Agent registration

Automated / dynamic client registration is **not currently open**. Agent
operators who need programmatic access should request credentials:

- Email: `michelle@webstrategyplus.com`
- Contact form: `https://franchisesuccessdirectory.com/contact`

Include the agent name, operator, intended use, and the data you need. Access is
granted per-agent; there is no self-service registration endpoint at this time.

## Rate limits and etiquette

- Identify your agent with a descriptive `User-Agent`.
- Keep crawl rates reasonable (no more than ~1 request/second).
- Do not attempt to harvest partner or franchise contact details; they are
  deliberately withheld from public responses. Use the on-site request forms.

Last updated: 2026-08-05