# auth.md — FlightLogic Authentication & Access Policy

## Overview
Reading FlightLogic airline reviews, baggage rules, open datasets, and machine-readable surfaces (`/llms.txt`, `/llms-full.txt`, `/.well-known/`, `/geo-chunks/`) requires **no authentication**.

- `identity_types_supported`: `["anonymous"]`
- `register_uri`: null (public resource)
- `scopes_supported`: `[]`

## Protocol & Agent Access Lifecycle
1. **Discover**: Agents discover capabilities via `/.well-known/api-catalog`, `/.well-known/agent-card.json`, and `/llms.txt`.
2. **Register**: Anonymous public access — no registration required.
3. **Claim & Use**: All public endpoints are open with CORS (`Access-Control-Allow-Origin: *`). Rate limiting applies at the Cloudflare edge.
4. **Revoke**: N/A for public anonymous data.