# auth.md

WorldCalculators.org is a public educational resource. Reading calculators, markdown mirrors, GEO chunks and open datasets needs **no account and no token**.

## Lifecycle (discover → register → claim → exchange → use → revoke)

1. **Discover.** Fetch `/.well-known/oauth-protected-resource`. `authorization_servers` is empty because this resource is public. Also fetch `/.well-known/api-catalog` and `/openapi.json`.
2. **Register.** `register_uri` is null. There is no client registration. `identity_types_supported`: `["anonymous"]`.
3. **Claim.** Not applicable. There is no identity to claim.
4. **Exchange.** Not applicable. No authorization code, no client credentials, no API keys for read access.
5. **Use.** GET any documented URL. CORS is open (`Access-Control-Allow-Origin: *`) on machine surfaces. Prefer per-page `.md` mirrors and `/geo-chunks/` over scraping HTML.
6. **Revoke.** Not applicable. Nothing was issued.

Write access does not exist. To report an error, use [/contact](https://worldcalculators.org/contact) — that is email, not OAuth.