# Authentication & Agent Registration Guidelines for Mentors Ltd.

This document describes authentication requirements and registration workflows for automated AI agents seeking to interact with Mentors Ltd. APIs and services.

## Overview

Mentors Ltd. supports OAuth 2.0 and OpenID Connect protocols for both user-delegated access and autonomous agent interactions.

## Discovery Endpoints

AI agents can programmatically inspect authentication configuration using standard metadata endpoints:
- OAuth Authorization Server Metadata: `/.well-known/oauth-authorization-server`
- OpenID Connect Metadata: `/.well-known/openid-configuration`
- OAuth Protected Resource Metadata: `/.well-known/oauth-protected-resource`

## Agent Registration

Agents can register dynamically or request access tokens using the following mechanisms:

### 1. Dynamic Client Registration
- Registration Endpoint: `https://mentors.ltd/oauth/agent/register`
- Supported Identity Types: `agent`, `user-delegated`
- Supported Credential Types: `jwt`, `oauth2_token`

### 2. Authentication Flow
- Grant Types: `authorization_code`, `client_credentials`
- Token Endpoint: `https://mentors.ltd/oauth/token`
- Token Revocation: `https://mentors.ltd/oauth/revoke`

## Scopes

- `api:read`: Read access to public and user metrics data
- `api:write`: Write access for submitted requests and forms
- `agent:access`: Special scope for automated agent workflows

For questions or security disclosures, please contact support@mentors.ltd.