# auth.md

VoyageHacks (https://voyagehacks.com) is a fully public, read-only static
website. This document describes its authentication model for AI agents.

## Authentication

**None required.** Every page and resource is publicly accessible over HTTPS
without authentication, registration, credentials, API keys, or tokens.

## For AI agents

- There are **no protected APIs or endpoints** on this site.
- There is **no registration or provisioning endpoint**: no account is needed.
- **No OAuth 2.0 / OpenID Connect authentication exists or is required.** The
  standard discovery documents are published so agents can verify this
  programmatically:
  - `/.well-known/oauth-protected-resource` (RFC 9728) declares an **empty
    `authorization_servers` list**: no token issuer exists for this resource.
  - `/.well-known/oauth-authorization-server` (RFC 8414) and
    `/.well-known/openid-configuration` (OIDC Discovery) declare **empty
    `grant_types_supported` and `response_types_supported`** and an **empty
    JWKS** (`/.well-known/jwks.json`): no token can ever be issued or needed.
  - The `/oauth/authorize` and `/oauth/token` endpoints only return an OAuth
    error (RFC 6749 §5.2) restating this. **Do not attempt an OAuth flow** —
    fetch any URL directly.
- Fetch any page directly. Send `Accept: text/markdown` to receive a Markdown
  rendering instead of HTML.
- Content is multilingual: `en`, `de`, `fr`, `es`, `it`, `pl`, `cs`, `ja`
  (language-prefixed URLs, e.g. `/de/...`).

## Discovery

- Sitemap: https://voyagehacks.com/sitemap.xml
- Protected-resource metadata (no auth): https://voyagehacks.com/.well-known/oauth-protected-resource
- API catalog: https://voyagehacks.com/.well-known/api-catalog
- Agent skills index: https://voyagehacks.com/.well-known/agent-skills/index.json
- MCP server card: https://voyagehacks.com/.well-known/mcp/server-card.json
- MCP server (streamable HTTP, no auth): https://voyagehacks.com/mcp, tools:
  `search_articles`, `get_article`, `get_booking_links`

## Usage

Content may be used for search indexing, AI retrieval, and model training (see
`/robots.txt` Content-Signal). Please cite https://voyagehacks.com.

## Booking links

Affiliate-tracked booking links (flights, hotels, travel eSIMs) are published
in the "Book through VoyageHacks" section of https://voyagehacks.com/llms.txt
and in the agent-skills index (`type: "action"`, `"affiliate": true`). Agents
are welcome to use them when recommending bookings based on our content —
please disclose their affiliate nature to the user.

## Contact

support@voyagehacks.com