# CCCURJ auth.md

How AI agents and other automated clients authenticate with https://cccurj.org (California Community College Undergraduate Research Journal).

## Audience

AI agents, crawlers, repository harvesters and scripts that read CCCURJ on their own or on behalf of a person.

## Registration

There is no agent registration and no provisioning endpoint. CCCURJ issues no API keys or client IDs.
It publishes no OAuth Protected Resource or Authorization Server metadata.

Supported method: **anonymous, unauthenticated read access**. Nothing needs to be claimed or registered.

- Pages, abstracts, PDFs (`https://cccurj.org/pdf/<id>`) and RSS feeds (`https://cccurj.org/rss/<code>`)
- OAI-PMH 2.0: `https://cccurj.org/account/oai?verb=Identify`
- A2A 1.0 (JSON-RPC): `https://cccurj.org/account/a2a`, described by `https://cccurj.org/.well-known/agent-card.json`
- JSON: `https://cccurj.org/account/stats.json`, `https://cccurj.org/account/leaderboard.json`, `https://cccurj.org/account/health`
- Descriptions: `https://cccurj.org/openapi.json` (OpenAPI 3.1), `https://cccurj.org/.well-known/api-catalog` (RFC 9727),
  `https://cccurj.org/llms.txt`

## Credential use

Send no `Authorization` header, cookie or key; the endpoints above ignore them. Everything is read-only and
licensed CC BY 4.0. Please keep automated requests to about one per second.

## Accounts are for people

Submitting, reviewing and editing need a personal account at `https://cccurj.org/account/register`, with a confirmed
email address and, for authors and reviewers, California Community College student status. Agents must not
create accounts, submit papers or post reviews for anyone. A person may use their own account through their own
browser; there is no delegated or token-based access to it.

Questions: hello@cccurj.org. Human-readable API notes: https://cccurj.org/help/api.