# auth.md - El Temporero Agent Registration & Authentication

## Overview
El Temporero provides open read access for autonomous agents to consult agricultural harvest offers, verified P2P currency exchange rates (CLP to BOB), and traditional culinary stalls in Chile.

## Agent Audience & Registration
Autonomous AI agents, search crawlers, and assistant clients interact with El Temporero services.
- **Agent Registration Endpoint**: `https://temporero.padilla-ia.tech/api/agents/register`
- **Supported Methods**: Anonymous bearer credentials and verified identity assertions.
- **Identity Types**: `anonymous`, `identity_assertion` (`urn:ietf:params:oauth:token-type:id-jag`, `verified_email`).
- **Credential Types**: `bearer_token`, `api_key`.
- **Claim URI**: `https://temporero.padilla-ia.tech/api/agents/claim`
- **Revocation URI**: `https://temporero.padilla-ia.tech/api/agents/revoke`

## Credential Use & Scopes
- `read:rates`: Access real-time P2P currency exchange rates.
- `read:posts`: Access public harvest jobs and community board.
- `read:food`: Access registered food stalls and locations.

Agent requests must include the credential via standard HTTP authorization header:
`Authorization: Bearer <token>`

## User Authentication & Privacy
End-users authenticate via Google OAuth using Supabase Auth. Identity verification documents (cédula front/back and facial selfies) are stored in private encrypted volumes and are never exposed via public agent endpoints.