# Fix: Agent auth/registration metadata doc published

> Web-audit fix skill for the `auth-md` check (Agent discovery & auth, MAY).

## Goal

Publish an auth.md telling agents how to obtain credentials.

## Fix

Publish an `auth.md` at `/.well-known/auth.md` (or `/auth.md`): a short markdown guide that
tells an agent how to obtain credentials, including where to register, which OAuth flows are
supported, token endpoints, and scopes. It turns "figure out our auth" into a one-fetch
orientation.

## Resources

- [anc.dev example](https://anc.dev/auth.md)

## Copy-paste prompt

Paste this into your coding agent, replacing the Issue line with the Result line from [your audit](https://anc.dev/web-audit):

```text
Goal: Publish an auth.md telling agents how to obtain credentials
Issue: <the audit's finding for this check>
Fix: Publish an `auth.md` at `/.well-known/auth.md` (or `/auth.md`): a short markdown guide that tells an agent how to obtain credentials, including where to register, which OAuth flows are supported, token endpoints, and scopes. It turns "figure out our auth" into a one-fetch orientation.
Skill: https://anc.dev/web-audit/skill/auth-md
Docs: https://anc.dev/auth.md
```

## Verify

Re-run the audit at [https://anc.dev/web-audit](https://anc.dev/web-audit) or call the `audit_website` MCP tool; the `auth-md` check should report `pass`.