# auth.md

You are an agent. This document describes **anonymous** access to the public Read/Link MCP for Schlüsseldienst Ludwigsburg **ikeytz**. Follow the steps in order; do not skip ahead.

Stand: 2026-08-25

This is the **anonymous public** flow: no account, no OAuth, no API key credential. You call the MCP endpoint directly. There is no agent-verified or email-verified registration.

Endpoints live at `https://www.ikeytz.com`.

## Registration metadata (self-contained)

```json
{
  "identity_types_supported": ["anonymous"],
  "anonymous": {
    "credential_types_supported": ["none"],
    "claim_uri": "https://www.ikeytz.com/auth.md#step-3--claim-ceremony-not-used"
  },
  "register_uri": "https://www.ikeytz.com/mcp",
  "scopes_supported": ["mcp.read"],
  "bearer_methods_supported": []
}
```

- `identity_types_supported`: only `anonymous`
- `anonymous.credential_types_supported`: `none` (no bearer credential is issued)
- `claim_uri`: this document — claim is not used (see Step 3)
- `register_uri`: the MCP endpoint itself (initialize / tools) — not `/agent/identity`

Do **not** fetch `/.well-known/oauth-protected-resource` or `/.well-known/oauth-authorization-server` for this site — they are intentionally absent.

## Step 1 — Discover

1. Server card: https://www.ikeytz.com/.well-known/mcp/server-card.json  
2. Tool catalogs: https://www.ikeytz.com/llms-mcp-server.txt · https://www.ikeytz.com/llms-mcp-web.txt  
3. Capability overview (ARD): https://www.ikeytz.com/.well-known/ai-catalog.json  
4. Plugin: https://www.ikeytz.com/.well-known/ai-plugin.json (`"auth": {"type": "none"}`)  
5. Official MCP Registry: `com.ikeytz/website` — https://registry.modelcontextprotocol.io/v0.1/servers?search=com.ikeytz/website

## Step 2 — Register (anonymous)

No provisioning API creates accounts. Anonymous “registration” = connect to MCP without a credential.

```http
POST /mcp HTTP/1.1
Host: www.ikeytz.com
Content-Type: application/json
Accept: application/json, text/event-stream
MCP-Protocol-Version: 2025-11-25

{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"agent","version":"1.0"}}}
```

No `Authorization: Bearer` header. No API key. The credential type is `none`.

Then list tools:

```http
POST /mcp HTTP/1.1
Host: www.ikeytz.com
Content-Type: application/json
Accept: application/json, text/event-stream
MCP-Protocol-Version: 2025-11-25

{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}
```

## Step 3 — Claim ceremony (not used)

`claim_uri` is `https://www.ikeytz.com/auth.md#step-3--claim-ceremony-not-used`.

Skip claim. Anonymous access does **not** convert into a user-owned credential. There is no claim token and no dashboard ceremony.

## Step 4 — Use the credential (`none`)

Call tools the same way — still **no** bearer credential:

```http
POST /mcp HTTP/1.1
Host: www.ikeytz.com
Content-Type: application/json
Accept: application/json, text/event-stream
MCP-Protocol-Version: 2025-11-25

{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"get_prices","arguments":{"locale":"de"}}}
```

CORS: `Access-Control-Allow-Origin: *` on `/mcp`.

## Scope

- **In:** public Read/Link MCP tools (prices, areas, FAQ, discovery)  
- **Out:** contact/partner form submit · internal ops APIs · booking · write APIs · OAuth login  
- Policy: ai-input allowed with attribution · **ai-train: no** · https://www.ikeytz.com/.well-known/ai.txt

## Humans (not agent signup)

- E-Mail: info@ikeytz.com  
- Impressum: https://www.ikeytz.com/impressum