# Agent Authentication Guide

## Overview

Press Release Generator supports OAuth 2.0 authentication for AI agents and automated systems.

## Base URL

`https://press-release-generator.base44.app`

## OAuth Protected Resource

This service is an OAuth 2.0 Protected Resource per RFC 9728.

- **Resource identifier**: `https://press-release-generator.base44.app`
- **Metadata endpoint**: `/.well-known/oauth-protected-resource`
- **Authorization server**: `https://auth.base44.com`

## Agent Registration

Agents wishing to access this API should:

1. Register at `https://auth.base44.com/register`
2. Request scopes relevant to your use case (see below)
3. Use Bearer token authentication in all API requests

```
agent_auth:
  register_uri: https://auth.base44.com/register
  supported_identity_types:
    - oauth2_client_credentials
    - api_key
  credential_types:
    - Bearer
  revocation_url: https://auth.base44.com/revoke
```

## Supported Scopes

| Scope | Description |
|---|---|
| `press_release:read` | Read press release drafts and submissions |
| `press_release:write` | Create and update press releases |
| `blog:read` | Read blog articles |
| `blog:write` | Create and publish blog articles |
| `media_contacts:read` | Read media contact CRM |
| `media_contacts:write` | Add/update media contacts |
| `analytics:read` | Read performance analytics |

## Authentication Header

```
Authorization: Bearer <access_token>
```

## Rate Limits

- 100 requests/minute per authenticated agent
- 1000 requests/hour per account

## MCP Server

This service exposes an MCP Server Card at `/.well-known/mcp/server-card.json` for Model Context Protocol integration.

## Agent Skills

Discoverable skills are indexed at `/.well-known/agent-skills/index.json`.