# Race Calendar auth.md

Race Calendar provides anonymous, read-only agent access to public Formula 1 schedules, standings, results, archive pages, and discovery metadata.

## Registration and credentials

- No registration, OAuth grant, API key, cookie, or bearer token is required for the public agent surfaces documented here.
- Public agents should use the website, Markdown negotiation, OpenAPI document, or read-only MCP tools.
- Race Calendar does not advertise an OAuth authorization server because the public agent surface has no protected resource or delegated user scope.

## Public agent surfaces

- Site guide: https://racecalendar.app/llms.txt
- API catalog: https://racecalendar.app/.well-known/api-catalog
- OpenAPI document: https://api.racecalendar.app/api/v2/openapi.json
- MCP Server Card: https://racecalendar.app/.well-known/mcp/server-card.json
- MCP endpoint: https://racecalendar.app/mcp
- Agent Skills index: https://racecalendar.app/.well-known/agent-skills/index.json
- Updates Atom feed: https://racecalendar.app/updates.atom.xml
- Updates JSON Feed: https://racecalendar.app/updates.json

## Boundaries

Account, email, referral, StoreKit, purchase, privacy-request, and administrative routes are outside the public agent surface. Do not attempt to create accounts, send email, make purchases, claim rewards, alter preferences, or call private write routes through agent automation.