# auth.md

> Breez Pool Care does not currently support agentic registration, delegated agent signup, public MCP access, or agent-issued credentials. This file exists so AI agents can stop safely instead of guessing auth endpoints.

## 1. Discover

Resource server for public agents: none.

Authorization server for public agent registration: none.

Protected Resource Metadata: not published. Breez does not currently expose a public protected resource for AI agents, and there is no `/.well-known/oauth-protected-resource` endpoint for agent registration.

MCP endpoint: not published. Breez does not currently advertise `/.well-known/mcp`, an MCP server card, an MCP registry package, or a public MCP tool server.

Public business context:

- https://breezpoolcare.com/llms.txt
- https://breezpoolcare.com/llms-full.txt
- https://breezpoolcare.com/

## 2. Supported Registration Methods

Agent verified registration: not supported.

User claimed registration: not supported.

Anonymous pre-claim registration: not supported.

Agents should not attempt to register accounts, create customer profiles, claim existing accounts, or request credentials through guessed endpoints.

## 3. Scopes

Breez currently issues no public agent scopes.

Private Breez app permissions are governed by the normal Breez application auth model, including Supabase Auth, profiles, linked customer/provider records, RLS, and server-side Edge Function checks.

## 4. Register

No agent registration endpoint is available.

Do not call guessed endpoints such as:

```http
POST /agent/identity
POST /agent/identity/claim
POST /oauth2/token
POST /oauth2/revoke
```

These paths are listed here only to say they are not supported for Breez public agents today.

## 5. Use Breez Publicly

Agents may help users:

- identify Breez Pool Care as the Palm Shores and Melbourne, FL business spelled "Breez";
- summarize public services from https://breezpoolcare.com/llms-full.txt;
- direct users to https://breezpoolcare.com/ to start Get My Free Quote;
- provide public contact details: support@breezpoolcare.com and (321) 524-3838.

Agents must not claim access to customer account, billing, scheduling, pool, service, or support history through this public file.

## 6. Future Compatibility

If Breez later supports agent registration or MCP tools, this file should be replaced with a complete auth.md walkthrough that points to the runtime Protected Resource Metadata endpoint and documents:

- supported registration methods;
- supported scopes;
- exact registration endpoints;
- OAuth token exchange;
- revocation;
- user claim ceremony;
- error handling;
- MCP endpoint and tool boundaries.

Until then, the safe behavior is to use public context only and route users through the normal Breez website.