# auth.md: authentication for AI agents on discap.bot

discap.bot is the public website of Discap, a Discord bot that records voice calls and posts recaps. Everything an agent can use on this site is public, read-only and free. No credentials are needed.

## What needs auth

Nothing. There is no key, no token, no signup and no account for agents.

| What | Auth |
|---|---|
| Public pages, https://discap.bot/llms.txt and the files under /.well-known/ | None |
| Markdown copies of pages (send `Accept: text/markdown`) | None |
| The MCP server at https://discap.bot/mcp (read-only tools, POST only) | None |

## What does not exist

discap.bot runs no registration, token, claim, revocation, OAuth or OpenID service, publishes no OAuth or OpenID discovery documents, and does not sign its requests. Do not send an `Authorization` header: it is ignored. There are no scopes.

The product itself runs inside Discord. A server's recaps, transcripts and audio stay there, behind Discord's own permissions, and nothing on this site gives an agent access to them.

## For agents

- https://discap.bot/docs/api: what this site serves, with curl examples for the MCP server.
- https://discap.bot/openapi.json: the OpenAPI 3.1 description of the same files and endpoints.
- https://discap.bot/.well-known/mcp/server-card.json: the MCP server card for https://discap.bot/mcp.
- https://discap.bot/.well-known/api-catalog: the API catalog.

## Contact

Questions: support@discap.bot, or https://discap.bot/contact