# Auth.md - Aureolab Agent Authentication

Aureolab exposes content and site-management interfaces through EmDash.

## Public Access

The public website, sitemap, robots.txt, llms.txt, and service pages do not require authentication.

## Agent API Access

Use the EmDash MCP endpoint for authenticated content-management tasks:

- MCP endpoint: https://www.aureolab.cl/_emdash/api/mcp
- OAuth protected resource metadata: https://www.aureolab.cl/.well-known/oauth-protected-resource
- OAuth authorization server metadata: https://www.aureolab.cl/.well-known/oauth-authorization-server
- EmDash admin: https://www.aureolab.cl/_emdash/admin

Agents should request the minimum required scope. Read-only content review generally needs `content:read`. Content updates require `content:write`.

## Human Handoff

For sales or project inquiries, use the public meeting flow, submit the brochure form at `/api/send-brochure`, or submit a qualified campaign lead at `/api/campaign-leads`.