# Joshua Philip — Agent & API Access

Canonical: https://joshuaphilip.com/auth.md

## Summary

This personal portfolio **does not currently offer** public agent registration, OAuth 2.0 / OpenID Connect authorization servers, MCP servers, WebMCP tools, or autonomous programmatic access to private systems.

## What is publicly accessible

- Portfolio pages (HTML or `Accept: text/markdown` on /, /projects, /experience, /contact, and published project pages)
- `https://joshuaphilip.com/llms.txt` and `https://joshuaphilip.com/llms-full.txt`
- `https://joshuaphilip.com/.well-known/api-catalog` (public discovery linkset — not a private API)
- `https://joshuaphilip.com/.well-known/agent-skills/index.json` (informational skills only)
- `https://joshuaphilip.com/sitemap.xml` and `https://joshuaphilip.com/robots.txt`

## Crawl preferences

`Content-Signal: search=yes,ai-input=yes,ai-train=no`

Meaning: search indexing and AI input/grounding are allowed; AI model training is discouraged. This is a preference, not a guarantee.

## Not accessible to agents

- Admin dashboard (`/admin/`)
- Internal Next.js handlers (`/api/` except public analytics collection — still not for agent automation)
- Fastify admin API (`/v1/` on production — password/token protected)
- Internal markdown rewrite route (`/internal/`)
- Contact form submission on a user's behalf
- Analytics dashboards, contact message inboxes, source repositories, or email accounts

## Contact

Users may reach Joshua through public links on https://joshuaphilip.com/contact (GitHub, LinkedIn, email). Agents should link users there rather than submitting forms autonomously.