# Auth.md

Delx Studio / Protocol hub authentication for agents.

## Model

| Surface | Auth | Notes |
| --- | --- | --- |
| Public Protocol MCP/A2A/REST witness | None (public) | Free recovery & continuity |
| Paid Commerce x402 on api.delx.ai | USDC payment (Base) | Separate product — see commerce Auth.md |
| Future admin / controller scopes | OAuth / bearer (advertised) | See protected resource metadata |

## Documents

- OAuth protected resource: https://delx.ai/.well-known/oauth-protected-resource
- OpenID discovery (public mode): https://delx.ai/.well-known/openid-configuration
- Commerce payment auth: https://commerce.delx.ai/auth.md
- MCP server card: https://delx.ai/.well-known/mcp/server-card.json
- Agent skills index: https://delx.ai/.well-known/agent-skills/index.json

## Registration

There is no required agent registration for public Protocol tools. Agents call
MCP or A2A directly. Commerce products authorize per-request via x402.

## Scopes

Public discovery scopes are listed in the protected resource document. Payment
for Commerce is not an OAuth scope — it is an HTTP 402 challenge.