# Auth.md

_Agent authentication metadata for cectoken.com._

cectoken.com exposes a public, read-only JSON API for AI agents and other automated clients. No authentication is required to call these endpoints.

## API base

- Base URL: `https://cectoken.com/api/v1`
- OpenAPI spec: `https://cectoken.com/openapi.json`
- API catalog: `https://cectoken.com/.well-known/api-catalog`
- Agent skills index: `https://cectoken.com/.well-known/agent-skills/index.json`

## Rate limits

Public endpoints are rate-limited to **60 requests per minute per IP address**. Exceeding the limit returns `429 Too Many Requests` with a `Retry-After` header.

## Human accounts

Human user accounts (for tracking a personal collection, adding to a wishlist, etc.) are created via email at [`/register`](https://cectoken.com/register). There is currently no programmatic agent-registration flow and no API-token issuance — sessions are cookie-based and intended for human users.

## Content negotiation

The `/items/{slug}`, `/brands/{slug}`, and `/guides/{slug}` HTML pages also serve a Markdown representation when called with `Accept: text/markdown`.

## Contact

For agent-related integration questions, email [contact@cectoken.com](mailto:contact@cectoken.com).