# graphs.univerlab.org auth.md

Everything a machine can read at graphs.univerlab.org is public and
read-only. There is no catalogue account, no API key and no registration:
this file says what needs nothing and what rides on a GitHub account.

## Needs nothing

Anonymous and read-only, no credential of any kind:

- the catalogue pages and their markdown twins (`Accept: text/markdown`);
- `llms.txt`, the one-line-per-document index;
- the JSON API — every `GET /api/*` route listed in
  `/.well-known/api-catalog`;
- the install redirects (`/i/...` answer 302 to the document on GitHub);
- drafts: `POST /api/drafts` is public (10 per minute per IP) and a
  draft installs once within 30 minutes, no account either way;
- the WebMCP tools every page registers (`search_catalogue`, `get_graph`,
  `get_node`) — they call the public `GET /api/*` routes only.

## Needs a GitHub account

Publishing is pushing to GitHub. A repository that carries the
`canopy-graph` topic and a `graphs/` or `nodes/` document folder is
listed by the scheduled index; the official listing additionally needs
a merged pull request to the official repository. No catalogue token is
issued, requested or accepted anywhere in that flow.

Reporting is a GitHub issue: the Report link on every document page
pre-fills an issue in the official catalogue repository, and a
maintainer decides by pull request. Filing one needs a GitHub account;
reading the catalogue never does.

## There is nothing to obtain

No registration endpoint, no OAuth client, no token: nothing here
behaves differently depending on who is asking, and no discovery
document describes how to ask for a credential, because none is issued.

## Contact

Jheison Martinez Bolivar — `hola@univerlab.org`, the address published on
univerlab.org. Write for a question, a correction, or an integration this
file does not cover.