# auth.md — ky-eco-10060.org

## Posture

Every surface and machine file on this host is open by design: no authentication, no account, no cookies. The record doors it names are read-only and open: listed issuers at https://mcp.getissuer.ai/mcp, receipts at https://mcp.rco-records.ai/mcp.

## Protected resource

- Resource: https://ky-eco-10060.org
- Protected Resource Metadata: [/.well-known/oauth-protected-resource](/.well-known/oauth-protected-resource)
- Authorization server (licensed routes of the Allooloo estate only): https://agentic-registries.ai
- Registration: https://agentic-registries.ai (POST /oauth/register); the public doors never need a token.

Standard held by Allooloo Technologies Corp. · Open standard, MIT licence.