# auth.md

Agent registration and authentication for MyGunImport.com.

## Audience

AI agents and automated clients that need to interact with MyGunImport.com public APIs, MCP tools, or human-operated import workflows.

## Authentication model

Public discovery documents, MCP tools, auction calendar data, and most HTTP endpoints are **unauthenticated**. There is no OAuth/OIDC authorization server issued by MyGunImport.com at this time.

Protected business workflows (quotes, Form 6 filings, shipments) are handled by humans after contact intake — not by bearer tokens.

## Registration / provisioning

Agents that need operational access should register via contact intake:

1. **Preferred:** `POST https://mygunimport.com/api/contact` with JSON fields `name`, `email`, `subject`, `message` (see OpenAPI at https://mygunimport.com/openapi.json).
2. **Human:** email [info@mygunimport.com](mailto:info@mygunimport.com) or call +1 844 628 3874.
3. **Web form:** https://mygunimport.com/contact

Supported methods:

- `contact_form` — automated contact API
- `email` — direct human registration
- `phone` — voice provisioning with staff

## Credentials

No API keys or OAuth client credentials are issued automatically. After staff review, access may be granted out-of-band (account email, shared workflow links, or future OAuth). Until then, use only public endpoints listed in:

- https://mygunimport.com/.well-known/api-catalog
- https://mygunimport.com/.well-known/mcp/server-card.json
- https://mygunimport.com/.well-known/oauth-protected-resource

## OAuth Protected Resource Metadata

https://mygunimport.com/.well-known/oauth-protected-resource documents this origin as a resource. `authorization_servers` is empty because MyGunImport.com does not yet operate an authorization server. When an AS is added, this file and PRM will be updated together.

## Related

- Developers: https://mygunimport.com/developers
- OpenAPI: https://mygunimport.com/openapi.json
- llms.txt: https://mygunimport.com/llms.txt
- MCP: https://mygunimport.com/.well-known/mcp