# auth.md · GrowthOS

Agent authentication and registration for GrowthOS APIs and tools.

## Audience

This document is for AI agents and automated clients that need to discover how to authenticate with GrowthOS resources.

## Protected resources

- **Website API** (`https://www.usegrowthos.com/api/*`) - newsletter and startup application endpoints
- **Platform API** (`https://api.growth-os.co`) - authenticated GrowthOS product and tools API

## Discovery endpoints

| Document | URL |
|----------|-----|
| OAuth Authorization Server | https://www.usegrowthos.com/.well-known/oauth-authorization-server |
| OAuth Protected Resource | https://www.usegrowthos.com/.well-known/oauth-protected-resource |
| API catalog | https://www.usegrowthos.com/.well-known/api-catalog |
| Agent skills index | https://www.usegrowthos.com/.well-known/agent-skills/index.json |

## Registration

Agents can register for API access at `https://www.usegrowthos.com/agent/register`.

Supported identity types:

- **anonymous** - receive an API key for public tool endpoints
- **verified_email** - bearer token after email verification

Claim credentials at `https://www.usegrowthos.com/agent/claim`.

## Public endpoints (no auth required)

These endpoints accept unauthenticated POST requests:

```
POST /api/newsletter
Content-Type: application/json

{ "email": "agent@example.com", "source": "agent" }
```

```
POST /api/for-startups
Content-Type: application/json
```

## Platform authentication

Human users authenticate via `https://app.growth-os.co`.

Token refresh: `POST https://api.growth-os.co/api/v1/auth/refresh/token/`

## Contact

For agent integration support: hello@usegrowthos.com