# auth.md — Agent Registration & Authentication

**Property:** Boffin Studio (`boffinstudio.com`)  
**Standard Compliance:** Auth.md v1.0, RFC 9728, RFC 8414, RFC 9421, x402 v2  
**Support Contact:** hello@boffinstudio.com  

---

## 1. Overview & Machine Discovery

Boffin Studio supports autonomous AI agent interaction, catalog discovery, dynamic offer estimation, and machine settlement. Visiting agents may register, acquire credentials, or transact without browser-based interaction.

### Machine-Readable Metadata Endpoints
- **Protected Resource Metadata (RFC 9728):** `https://boffinstudio.com/.well-known/oauth-protected-resource`
- **Authorization Server Metadata (RFC 8414):** `https://boffinstudio.com/.well-known/oauth-authorization-server`
- **RFC 9727 API Catalog:** `https://boffinstudio.com/.well-known/api-catalog`
- **OpenAPI 3.1 Specification:** `https://boffinstudio.com/openapi.json`
- **Model Context Protocol (MCP):** `https://boffinstudio.com/.well-known/mcp/server-card.json`
- **Universal Commerce Protocol (UCP):** `https://boffinstudio.com/.well-known/ucp`
- **Agent Knowledge Base:** `https://boffinstudio.com/llms.txt`

---

## 2. Agent Identity & Content Negotiation

### Agent Identification
All visiting autonomous systems must declare a verifiable `User-Agent` containing an agent identifier and operational URI:
```http
User-Agent: YourAgentName/1.0 (+https://yourdomain.com/agent-card.json)