# Agent Authentication for Shalin Siriwardhana

This site is a public read-only personal blog. Agents do not need to register, sign in, or request credentials to read public posts, fetch Markdown responses, use the public search index, or access discovery resources.

## Discovery

- Site: https://shalinsiriwardana.asia/
- API catalog: https://shalinsiriwardana.asia/.well-known/api-catalog
- OAuth authorization server metadata: https://shalinsiriwardana.asia/.well-known/oauth-authorization-server
- OAuth protected resource metadata: https://shalinsiriwardana.asia/.well-known/oauth-protected-resource
- Agent registration URI: https://shalinsiriwardana.asia/agent/auth/
- Agent claim URI: https://shalinsiriwardana.asia/agent/auth/claim/
- Agent revocation URI: https://shalinsiriwardana.asia/agent/auth/revoke/
- OpenAPI description: https://shalinsiriwardana.asia/openapi.json
- Search index: https://shalinsiriwardana.asia/search.json
- Sitemap: https://shalinsiriwardana.asia/sitemap.xml

## Registration

Registration is not required for public read-only access.

Agents may treat the supported identity type as `anonymous` and the supported credential type as `none`.

## Supported Flows

### Anonymous Public Access

1. Fetch `https://shalinsiriwardana.asia/auth.md`.
2. Confirm that registration is not required.
3. Fetch public resources such as `https://shalinsiriwardana.asia/search.json`, `https://shalinsiriwardana.asia/sitemap.xml`, or article URLs.
4. For article pages, agents may send `Accept: text/markdown` to request Markdown where the server supports content negotiation.

## Scopes

- `public.read`: read public posts, public metadata, sitemap files, RSS, and search index data.

## Credentials

No credentials are issued for public resources.

- Identity types supported: `anonymous`
- Credential types supported: `none`
- Bearer token required: no

## Claiming Access

There is no user account claim flow for this static blog. The claim URI in metadata points back to this document section so agents receive a clear explanation instead of an undefined endpoint.

## Revocation

There are no issued credentials to revoke. Agents should discard cached public data according to their own retention policies and the site's robots and content-signal directives.

## Contact

For questions about agent access, use the public author profile: https://shalinsiriwardana.asia/author/