# auth.md

Audience: AI agents / crawlers.

Stack Gems is a public catalog. JSON APIs and machine-readable pages are read-only. No registration, OAuth, API keys, or credentials.

## Public read (no auth)

- GET /api/gems
- GET /api/skills
- GET /api/tools
- GET /llms.txt
- GET /for-agents

Also public: GET /api/stacks, GET /.well-known/api-catalog, GET /openapi.json.

## Writes

There is no POST registration and no agent OAuth.

Humans submit tools at /submit. Optional machine queues (POST /api/submit, POST /api/reviews) are human-vetted and never auto-published. No credentials are issued.