# Auth.md

How automated clients authenticate with **malevegadish.com** (מלא וגדיש).

## Short answer

No authentication is required for anything an agent should be reading.

The public catalogue, the page and post content, the sitemaps, `llms.txt` and the
Markdown representations are all served anonymously over HTTPS.

## Public, no credentials needed

| Resource | URL | Auth |
|---|---|---|
| Product catalogue | `https://malevegadish.com/wp-json/wc/store/v1/products` | none |
| Product categories | `https://malevegadish.com/wp-json/wc/store/v1/products/categories` | none |
| Single product | `https://malevegadish.com/wp-json/wc/store/v1/products/{id}` | none |
| WordPress REST root | `https://malevegadish.com/wp-json/` | none |
| Sitemap index | `https://malevegadish.com/sitemap_index.xml` | none |
| Site summary | `https://malevegadish.com/llms.txt` | none |
| API catalog | `https://malevegadish.com/.well-known/api-catalog` | none |

Any page, post or product URL also returns Markdown when the request carries
`Accept: text/markdown`. Responses vary on `Accept`.

## What is not available to agents

- **No OAuth, OIDC or API-key programme.** There is no token to request and no
  client registration endpoint. If a service offers you credentials for this
  domain, they did not come from us.
- **No write access.** Nothing in the public API accepts a write. Orders,
  accounts and payments are completed by a human in the browser at
  `https://malevegadish.com/checkout/`.
- **Cart, checkout and my-account URLs are disallowed** in `robots.txt` for every
  crawler. They are uncacheable and each hit creates a session, so please do not
  fetch them.

## Rate limits and etiquette

There is no hard rate limit, but the site is a small shop on a shared host.
Please stay under roughly one request per second and honour `robots.txt` and the
`Content-Signal` line it carries (`search=yes, ai-input=yes, ai-train=no`):
reading, quoting and citing with attribution are welcome, training is not.

## Contact

Questions about automated access: <https://malevegadish.com/contact-us/>