# Agent Registration & Authentication Policy

> Machine-readable agent authentication and interaction policy for Muhammad Umer Farooq's Portfolio and public APIs.

---

## 1. Overview & Access Policy

This website welcomes automated AI agents, search crawlers, LLM search engines, and MCP clients. Public resources (including project details, technical skills, blog posts, and `/llms.txt`) are accessible **without authentication**.

For automated agents interacting with protected endpoints or dynamic tool executions:
- **Issuer**: `https://umersmx.vercel.app`
- **Discovery**: `https://umersmx.vercel.app/.well-known/oauth-authorization-server`
- **Protected Resources**: `https://umersmx.vercel.app/.well-known/oauth-protected-resource`

---

## 2. Supported Scopes

| Scope | Description | Authentication Required |
| :--- | :--- | :--- |
| `public` | Read public portfolio content, projects, skills, articles | No (Open access) |
| `read` | Read detailed engineering knowledge base & LLM context | No (Open access) |
| `agent` | Execute client-side tools and submit contact form inquiries | Bearer token / Direct |

---

## 3. Agent Guidelines & Rate Limits

1. **User Agent**: Please identify your agent via a descriptive `User-Agent` string (e.g. `MyAgentBot/1.0 (+https://example.com/bot)`).
2. **Rate Limits**: Normal browsing is limited to 60 requests/minute.
3. **Contact Submission**: Automated agents submitting contact requests via the contact form must provide a valid email and non-spam payload.

---

## 4. Contact & Support

For agent registration or API inquiries:
- **Email**: umersmx@gmail.com
- **GitHub**: https://github.com/umersmx
- **Portfolio**: https://umersmx.vercel.app