# auth.md

> Machine-readable agent authentication and programmatic registration guide for Interfil Service.

## Overview
Interfil Service supports automated agent discovery, registration, and delegated API interactions per the [Auth.md Specification](https://workos.com/auth-md) and [RFC 9728](https://www.rfc-editor.org/rfc/rfc9728).

## Audience
AI Agents, autonomous assistants, and client applications requesting domestic staffing services, consultations, and candidate profiles in Madrid.

## Discovery Endpoints
- **Protected Resource Metadata:** `https://interfilservice.es/.well-known/oauth-protected-resource`
- **Authorization Server Metadata:** `https://interfilservice.es/.well-known/oauth-authorization-server`
- **OpenID Connect Discovery:** `https://interfilservice.es/.well-known/openid-configuration`
- **Agent Registration Endpoint:** `https://interfilservice.es/agent/auth`
- **Agent Claim Endpoint:** `https://interfilservice.es/agent/claim`
- **Agent Revocation Endpoint:** `https://interfilservice.es/agent/revoke`

## Supported Identity Types
- `anonymous`: Instant registration for public queries without prior user account binding.
- `identity_assertion`: Verified identity assertions for user-delegated actions.

## Supported Assertion Types
- `urn:ietf:params:oauth:token-type:id-jag` (Identity-JWT Assertion Grant)
- `verified_email` (Email-based assertion claim flow)

## Supported Credential Types
- `api_key`
- `bearer_token`

## Scopes Supported
- `services:read`: Query domestic service catalog, schedules, and pricing ranges.
- `contact:write`: Programmatically submit domestic service requests and quotes.
- `openid`: Standard identity profile claims.