# SylaNova AI - Agent Authentication & Registration Guide (auth.md)

Welcome AI Agents. SylaNova AI provides automated academic quality assurance, syllabus auditing, exam blueprint generation, and accreditation compliance tools (ABET, NCAAA, Bloom's Taxonomy).

## 1. Overview
- **Service Name**: SylaNova AI Academic Engine
- **Base URL**: `https://sylanova.dev`
- **API Base**: `https://sylanova.dev/api`
- **Auth Endpoint**: `https://sylanova.dev/.well-known/oauth-authorization-server`
- **Protected Resource**: `https://sylanova.dev/.well-known/oauth-protected-resource`
- **MCP Server**: `https://sylanova.dev/.well-known/mcp/server-card.json`

## 2. Authentication Methods

### Method A: Bearer Token (OAuth 2.0 / OIDC / Firebase ID Token)
Send standard Authorization header:
```http
Authorization: Bearer <YOUR_ACCESS_TOKEN>
```

### Method B: Agent Registration & API Key
Agents can register dynamically or query protected endpoints using an API key or bearer token with the scopes specified below.

## 3. Supported Scopes
- `syllabus:audit` - Perform automated course syllabus analysis and compliance checks against ABET/NCAAA.
- `exam:generate` - Generate exam questions, blueprints, and evaluation rubrics.
- `matrix:read` - Read program educational objectives, CLOs, and curriculum mapping matrices.
- `calendar:sync` - Extract and synchronize academic term dates and milestones.

## 4. Agent Discovery Endpoints
- **API Catalog (RFC 9727)**: `/.well-known/api-catalog`
- **ARD Capability Manifest**: `/.well-known/ai-catalog.json`
- **Agent Skills Index**: `/.well-known/agent-skills/index.json`
- **MCP Server Card**: `/.well-known/mcp/server-card.json`
- **OpenID Discovery**: `/.well-known/openid-configuration`