# CopyCat Agent Authentication

## Public website and discovery API

The resources on `https://www.runcopycat.com`, including `/api/site`, `/api/status`, `/llms.txt`, and the Agent Skills index, are public and require no authentication.

## Customer application

The customer application at `https://app.runcopycat.com` uses interactive, organization-scoped user authentication. CopyCat does not currently publish a public OAuth authorization server, protected-resource metadata, dynamic client registration endpoint, or agent credential flow for the customer application.

Agents must not send user credentials or attempt to automate an interactive login. A human user should sign in directly to the customer application.

## Partner and agent integrations

Self-service agent registration is not currently available. To discuss a supported API or agent integration, email `hello@runcopycat.com` with the organization name, intended workflow, required data access, and security contact.

Public API details are available in the [API catalog](https://www.runcopycat.com/.well-known/api-catalog) and [API documentation](https://www.runcopycat.com/api/docs).