# auth.md

Holistic Rejuvenation Center does not offer self-serve agent registration, protected public APIs, or autonomous booking/write access through this website.

## Audience

This document is for AI assistants and browser agents that need to understand how to interact with the public HRC website.

## Supported access

- Public website pages: available without authentication.
- Public discovery files: `/llms.txt`, `/openapi.json`, `/.well-known/api-catalog`, and `/.well-known/agent-skills/index.json`.
- Browser agent helpers: read-only WebMCP tools may be exposed on page load when the visitor's browser supports `navigator.modelContext`.

## Unsupported access

- No OAuth client registration.
- No public token endpoint.
- No protected customer API.
- No health records API.
- No payment API.
- No autonomous booking or client-contact action.

## How agents should help visitors

Agents may summarize public services, point visitors to the booking page, explain the location, and help visitors choose where to start. Agents must not book, cancel, purchase, diagnose, or contact HRC on a visitor's behalf unless a human explicitly completes that action through the public website or HRC's existing booking system.

## Human contact path

For booking or service questions, use the public booking and contact paths linked from:

https://www.holisticrejuvenationcenter.com/book/