# Fix: Agent auth/registration metadata doc published

> Web-audit fix skill for the `auth-md` check (Agent discovery & auth, MAY).

## Goal

Publish an auth.md telling agents how to obtain credentials.

## Fix

Publish an `auth.md` at `/.well-known/auth.md` (or `/auth.md`): a short markdown guide that
tells an agent how to obtain credentials, including where to register, which OAuth flows are
supported, token endpoints, and scopes. It turns "figure out our auth" into a one-fetch
orientation.

## Resources

- [anc.dev example](https://anc.dev/auth.md)

## Copy-paste prompt

Paste this into your coding agent. [Your audit](https://anc.dev/audit) adds what it observed for this check:

```text
Goal: Publish an auth.md telling agents how to obtain credentials
Fix: Publish an `auth.md` at `/.well-known/auth.md` (or `/auth.md`): a short markdown guide that tells an agent how to obtain credentials, including where to register, which OAuth flows are supported, token endpoints, and scopes. It turns "figure out our auth" into a one-fetch orientation.
Skill: https://anc.dev/fix/auth-md
Docs: https://anc.dev/auth.md
```

## Verify

Re-run the audit at [https://anc.dev/audit](https://anc.dev/audit) or call the `audit_website` MCP tool; the `auth-md` check should report `pass`.