---
name: auth-md
description: Publish auth.md for agents
---

# Fix: authMd

**Probe:** `GET /auth.md` (markdown/plain, body >20 chars) plus discoverable PRM or AS `agent_auth` block, and registration wording (register / api key / signup / oauth / bearer).

**Add** `/auth.md` documenting how agents obtain credentials. Link it from OAuth PRM and/or:

```json
"agent_auth": { "skill": "https://example.com/auth.md" }
```

Never require POSTing registration endpoints during the scan.