---
name: CODEFORGE TECHNOLOGIES & SOLUTIONS
description: AI Agent Authentication & Registration Specifications for Codeforge Services and WebMCP Tools
auth_version: "1.0.0"
agent_auth:
  register_uri: "https://thecodeforge.in/api/v1/agent/register"
  supported_identity_types: ["agent", "user", "service", "workload"]
  credential_types: ["api_key", "client_credentials", "bearer_token"]
  claim_uri: "https://thecodeforge.in/api/v1/agent/claim"
  revocation_uri: "https://thecodeforge.in/api/v1/agent/revoke"
  protected_resources: ["https://thecodeforge.in/api/v1"]
  authorization_servers: ["https://thecodeforge.in"]
  scopes:
    read:services: "Query software, blockchain, AI, and ERPNext service offerings"
    write:quotes: "Submit automated project scopes, requirement specs & quote requests"
    agent:tools: "Execute MCP & WebMCP tool invocations"
---

# Authentication for AI Agents (Auth.md)

**Entity**: CODEFORGE TECHNOLOGIES & SOLUTIONS  
**Base URL**: `https://thecodeforge.in`  
**API Endpoint**: `https://thecodeforge.in/api/v1`  
**Status**: Production Ready  
**GSTIN**: `07GRYPM1156G1Z9`  

---

## 1. Overview for Autonomous Agents

This document defines machine-to-machine (M2M) and autonomous AI agent authentication procedures for **CODEFORGE TECHNOLOGIES & SOLUTIONS** services and tool APIs.

Autonomous agents and LLM clients can discover capabilities, query software engineering catalogs, request estimates, and execute WebMCP / MCP tools via authenticated channels.

---

## 2. Discovery Endpoints

- **OAuth 2.0 Authorization Server**: `https://thecodeforge.in/.well-known/oauth-authorization-server`
- **OpenID Connect Discovery**: `https://thecodeforge.in/.well-known/openid-configuration`
- **Protected Resource Metadata (RFC 9728)**: `https://thecodeforge.in/.well-known/oauth-protected-resource`
- **API Catalog (RFC 9727)**: `https://thecodeforge.in/.well-known/api-catalog`
- **MCP Server Card (SEP-1649)**: `https://thecodeforge.in/.well-known/mcp/server-card.json`
- **Agent Skills Discovery**: `https://thecodeforge.in/.well-known/agent-skills/index.json`
- **ARD Capability Manifest**: `https://thecodeforge.in/.well-known/ai-catalog.json`

---

## 3. Agent Registration & Credentials

### Option A: Public & Read-Only Access
AI agents can freely access public discovery documents, Markdown content (`Accept: text/markdown`), service catalogs, and WebMCP browser contexts without credentials.

### Option B: Bearer API Key (Fast Track for Agents)
To obtain an agent API key for programmatic quote requests and high-rate inquiries:
1. Send a POST request to `https://thecodeforge.in/api/v1/agent/register` with:
```json
{
  "agent_name": "MyAutonomousAgent/1.0",
  "developer_email": "agent-operator@example.com",
  "requested_scopes": ["read:services", "write:quotes", "agent:tools"]
}
```
2. Pass the returned Bearer token in subsequent requests:
```http
Authorization: Bearer cf_live_agent_xxxxxxxxxxxxxxxxxxxxxxxx
```

### Option C: OAuth 2.0 Client Credentials Flow
For enterprise workload identity:
```http
POST /oauth/token HTTP/1.1
Host: thecodeforge.in
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET&scope=read:services%20write:quotes%20agent:tools
```

---

## 4. Supported Scopes

| Scope | Description |
|---|---|
| `read:services` | Query software, blockchain, AI, and ERPNext service offerings |
| `write:quotes` | Submit automated project scopes, requirement specs & quote requests |
| `agent:tools` | Execute MCP & WebMCP tool invocations |

---

## 5. Rate Limits & Headers

- **Standard Agent Tier**: 60 requests/minute
- **Authenticated Tier**: 600 requests/minute
- **Rate Limit Headers**:
  - `X-RateLimit-Limit`
  - `X-RateLimit-Remaining`
  - `X-RateLimit-Reset`

---

## 6. Security & Contact

For security inquiries or custom enterprise agent integrations:
- **Company**: CODEFORGE TECHNOLOGIES & SOLUTIONS
- **GSTIN**: 07GRYPM1156G1Z9
- **Email**: info@thecodeforge.in
- **Phone**: +91 87506 42003
- **Location**: New Delhi, India