# Auth.md

Blue Watch is a public service. Reading its directory, account reports, statistics, and read-only data APIs does not require registration, login, an API key, OAuth, or a session. Agents can use these public resources directly; do not ask people for credentials.

## Agent registration

No agent registration is needed for public read access. Blue Watch does not issue credentials or provide a private account API. Manual account scans are optional public actions, subject to rate limits and one-week result caching; they are not an authentication or registration flow.

## OAuth and protected resources

Blue Watch has no OAuth authorization server and no protected API scopes. Its metadata endpoint at [/.well-known/oauth-protected-resource](https://blue.svpn.com/.well-known/oauth-protected-resource) documents that no authorization server or scope is required. SVPN SOCIAL and SVPN News have separate authentication services; their tokens do not authorize Blue Watch.

## Optional contribution

The optional contribution endpoint is not authentication, is never required to use Blue Watch, and grants no account access or benefits. See [the API description](https://blue.svpn.com/openapi.json).