# CloudSyncPK Auth.md

## Agent Audience

This document is for AI agents and automated clients discovering CloudSyncPK's public agent interfaces.

## Registration and Provisioning

No registration is required for the current agent interfaces. CloudSyncPK exposes only public, read-only discovery tools:

- MCP Server Card: https://cloudsyncpk.com/.well-known/mcp/server-card.json
- MCP Streamable HTTP endpoint: https://cloudsyncpk.com/mcp
- WebMCP tools: registered in supported browsers on CloudSyncPK pages

Use these interfaces anonymously. CloudSyncPK does not issue an API key, client secret, access token, refresh token, or agent credential for them.

## Supported Authentication Method

- Method: anonymous
- Credentials required: none
- Supported operations: public, read-only information discovery
- Write operations: unavailable
- Protected customer data: unavailable

## OAuth and OpenID Connect Status

CloudSyncPK does not currently operate an OAuth authorization server, OpenID Provider, or protected agent API. Therefore, it does not publish OpenID Connect discovery metadata, OAuth authorization-server metadata, or OAuth protected-resource metadata.

If protected agent capabilities are introduced, this document will be updated with the real issuer, registration process, scopes, authorization endpoint, token endpoint, JWKS URI, revocation process, and protected-resource metadata.

## Human Contact Paths

- Free AWS Audit: https://cloudsyncpk.com/free-audit
- General contact: https://cloudsyncpk.com/contact

These are human lead-capture forms, not agent registration or supported API endpoints. Agents must not submit them without the user's explicit review and approval.

## Credential Safety

- Never send AWS root credentials or passwords.
- Never send AWS secret access keys, private keys, SSH keys, or other long-lived credentials.
- When infrastructure access is required for a human-approved project, use temporary, least-privilege IAM roles.
- Remove project access after project completion.

For the current API status, see https://cloudsyncpk.com/docs/api.