# auth.md

Novawave agent registration. No registration and no credential is required. novawave.tr is a public storefront for Novawave framed posters, and every page is readable by anyone, including automated agents.

## Registration

There is nothing to register for. The resource is public, so an agent does not create an account, request a token, or grant a scope before reading it.

Supported identity types: anonymous. No identity is collected.

Supported credential types: none. No access token, API key, or client secret is issued.

- Register: there is no registration endpoint. The only registration URI is this document, `https://novawave.tr/auth.md`.
- Claim: there is no separate claim URL. This document is the claim URI, and it claims nothing because nothing is issued.
- Revoke: there is no revocation URL. No credential exists to revoke.

## What an agent can read without a token

- Any page as HTML, or as Markdown by sending `Accept: text/markdown`. The home mirror is also at `/index.md`.
- The product reference at `/llms.txt` and the full reference at `/llms-full.txt`.
- The page index at `/sitemap.xml` and the markdown index at `/sitemap.md`.
- The discovery documents under `/.well-known/`.

## OAuth and scopes

No scope is required, and none is granted because nothing is protected. There is no token to request. The protected resource metadata at `/.well-known/oauth-protected-resource` and the authorization server metadata at `/.well-known/oauth-authorization-server` say the same thing: the resource is public and `agent_auth.required` is `false`.

## What an agent cannot do here

There is no agent write API on this marketing/storefront site. Checkout and orders run on the ikas shop at `https://novawave.ikas.shop/`. For humans: Instagram [@novawavetr](https://www.instagram.com/novawavetr) or TikTok [@novawavetr](https://www.tiktok.com/@novawavetr).