# Auth.md — Hardrock Charlie Foundation

> Machine-readable registration and authentication instructions for AI agents and automated integrations interacting with `https://hardrockcharliefoundation.org`.
>
> This document is the human-readable companion to the machine-readable discovery metadata at `/.well-known/oauth-protected-resource`, `/.well-known/oauth-authorization-server`, and `/.well-known/openid-configuration`. See [workos.com/auth-md](https://workos.com/auth-md) for the spec.

## Resource

- **Resource identifier:** `https://hardrockcharliefoundation.org`
- **Resource name:** Hardrock Charlie Foundation Public Site
- **Issuer:** `https://hardrockcharliefoundation.org`
- **Operator:** Hardrock Charlie Foundation, Inc. (501(c)(3))
- **Contact:** `info@hardrockcharliefoundation.org`

## Status

The public site is **read-only** and does **not** currently expose protected APIs. No OAuth flows are active. This document and the associated `/.well-known/oauth-*` documents exist for agent-discovery compatibility (RFC 8414, RFC 9728, [auth.md](https://workos.com/auth-md)).

## Discovery

| Document                       | URL                                                                                |
| ------------------------------ | ---------------------------------------------------------------------------------- |
| OAuth Protected Resource (9728)| `https://hardrockcharliefoundation.org/.well-known/oauth-protected-resource`       |
| OAuth Authorization Server     | `https://hardrockcharliefoundation.org/.well-known/oauth-authorization-server`     |
| OpenID Configuration           | `https://hardrockcharliefoundation.org/.well-known/openid-configuration`           |
| JWKS                           | `https://hardrockcharliefoundation.org/.well-known/jwks.json`                      |
| API catalog (RFC 9727)         | `https://hardrockcharliefoundation.org/.well-known/api-catalog`                    |
| MCP Server Card                | `https://hardrockcharliefoundation.org/.well-known/mcp/server-card.json`           |
| Agent Skills index             | `https://hardrockcharliefoundation.org/.well-known/agent-skills/index.json`        |
| LLM site summary               | `https://hardrockcharliefoundation.org/llms.txt`                                   |

## Registration

There is no automated registration endpoint at this time. To request an integration, partnership, or programmatic access:

1. Email `info@hardrockcharliefoundation.org` with:
   - Agent or organization name
   - Use case and expected request volume
   - Identity type (`agent` or `human`)
   - Whether the integration will be read-only or write
2. Or submit the [contact form](https://hardrockcharliefoundation.org/contact) with subject `Agent Integration`.

A Foundation representative will respond within 5 business days.

### register_uri

`https://hardrockcharliefoundation.org/contact`

### Supported identity types

| Type    | Status                                                  |
| ------- | ------------------------------------------------------- |
| `human` | Supported via the public contact form.                  |
| `agent` | Supported via email-based out-of-band registration.     |

### Supported credential types

| Type     | Status                                                             |
| -------- | ------------------------------------------------------------------ |
| `bearer` | Reserved — not currently issued.                                   |
| `dpop`   | Not supported.                                                     |
| `mtls`   | Not supported.                                                     |

## Claims

No claims are currently issued. If access tokens are ever introduced, they will use the standard claim set: `sub`, `iss`, `aud`, `exp`, `iat`.

### claim_uri

`https://hardrockcharliefoundation.org/auth.md#claims`

## Revocation

There is no live token surface to revoke. If an integration is later established, revocation will be available via the same contact channel.

### revocation_uri

`https://hardrockcharliefoundation.org/contact`

## Acceptable Use

The site content describes a US-based 501(c)(3) nonprofit serving the 75th Ranger Regiment community. Agents are welcome to crawl and summarize publicly available pages and structured data. Do not scrape contact-form submissions or attempt to impersonate Foundation officials.

For AI content-usage preferences (search / ai-input / ai-train), see [robots.txt](https://hardrockcharliefoundation.org/robots.txt).