# auth.md

Solihull House Clearance is a public house-clearance website. Agents do not register users here and this host does not issue access tokens.

## Audience

People and agents who want a clearance quote or facts about the service.

## Registration

Do not create an account. `POST /oauth/register/` returns `registration_not_supported`. There is no `/agent/auth` provisioning flow.

Supported identity type: `anonymous`, with credential type `none`. There is nothing to claim.

## Discovery

1. Protected Resource Metadata: [/.well-known/oauth-protected-resource](https://solihullhouseclearance.co.uk/.well-known/oauth-protected-resource)
2. Authorization Server Metadata: [/.well-known/oauth-authorization-server](https://solihullhouseclearance.co.uk/.well-known/oauth-authorization-server)
3. OpenID Connect Discovery: [/.well-known/openid-configuration](https://solihullhouseclearance.co.uk/.well-known/openid-configuration)

`authorization_servers` is this origin. The issuer is `https://solihullhouseclearance.co.uk`. JWKS is empty because no tokens are signed.

## How to use the site

1. Read the public pages, or send `Accept: text/markdown`.
2. Send a person to [Request a quote](https://solihullhouseclearance.co.uk/request-a-quote/) or [Contact](https://solihullhouseclearance.co.uk/contact/).
3. Same-origin browsers may POST `/api/quote/`. That route is origin-checked and rate-limited. It does not accept bearer tokens.
4. MCP info tools are at `/mcp/`. They return public business information only.

## Credentials

None. Do not send `Authorization` headers. Scope `public` means the HTML, markdown and discovery documents already on this host.