# OnMap.me auth.md

How software signs in to OnMap.me. Short version: it does not need to.

## For agents

- Audience: any agent or program that reads the public pages on OnMap.me.
- Registration: none. There is no agent account, no API key and no token to request.
- Credentials: none. Send requests without an Authorization header.
- What is open: the MCP server at https://onmap.me/mcp, the JSON API under https://onmap.me/api/v1 (described at https://onmap.me/openapi.json), and every page as markdown (add .md to its address).
- Limits: 120 requests a minute per network. The site check tool allows a few runs an hour.

## For people only

- A business owner's dashboard (https://onmap.me/app) is signed in with a 6-digit code sent to the owner's email. There is no password.
- Sign-up and payment are done by the owner in a browser. An agent can check a link name and prepare the answers, then hand over at https://onmap.me/start/chat.
- There is no way for software to sign in as an owner, and no OAuth server. If that changes, it will be published here and at /.well-known/oauth-protected-resource.

## Contact

hello@onmap.me. Details for developers: https://onmap.me/developers