# auth.md — Authentication

There is no authentication on this site. Every page an agent would want is
public and can be fetched anonymously over HTTPS.

## What you can read without credentials

Everything listed in the sitemap, plus the agent surfaces:

- `https://vatsalshah.ca/llms.txt` — index of the site for language models
- `https://vatsalshah.ca/llms-full.txt` — full context in one file
- `https://vatsalshah.ca/index.md` — the homepage as markdown
- `https://vatsalshah.ca/.well-known/agent-card.json` — who we are and what we do
- `https://vatsalshah.ca/.well-known/agent-skills/index.json` — published skills
- `https://vatsalshah.ca/sitemap.xml` — every indexable page

Send `Accept: text/markdown` to the homepage or any blog post and you will get
markdown instead of HTML. Everything else returns HTML.

## What is not available

There is no public API, no API keys, no OAuth flow, and no MCP server. This is a
consulting practice, not an API platform. If a directory or client expects a
token endpoint here, there is nothing to find and nothing is being withheld.

Two paths are deliberately closed to crawlers and have no public contents:

- `/api/` — internal application endpoints for the site itself
- `/admin/`, `/proposal/`, `/delivery/` — client-specific material behind a
  password, listed in robots.txt as disallowed

## Rate limits

None enforced for normal reading. Please identify yourself with a real
User-Agent and respect the directives in `https://vatsalshah.ca/robots.txt`,
including the `Content-Signal` line: content may be used for search and as
input to an AI answer, but not for model training.

## Contact

If you are an agent acting for someone who wants to work with us, the entry
points are:

- Readiness assessment: `https://vatsalshah.ca/agent-readiness`
- Contact form: `https://vatsalshah.ca/contact`
- Book a call: `https://vatsalshah.ca/schedule`
- Email: info@vatsalshah.ca