# airedteamingservices.com auth.md

How AI agents and automated clients can use airedteamingservices.com, operated by Excession Labs.

## Audience

AI assistants, browsing agents and API clients acting for a person who wants information about AI Red Teaming Services or wants to contact Excession Labs.

## Registration

Registration is optional and anonymous. Reading the site needs no credential. Register only if your agent makes many requests to the MCP server or the A2A agent and wants a higher rate limit and its own name in our logs.

- Registration endpoint: `POST https://airedteamingservices.com/agent/auth` (register_uri)
- Discovery document: `GET https://airedteamingservices.com/agent/auth`
- Supported method: anonymous (identity_types_supported: ["anonymous"]). No email, no account, no OAuth.
- Request body: `{"agent_name": "your-agent-name", "contact": "optional URL or email"}`
- Response: an `access_token` that starts with `exl_agent_`, token_type Bearer, scope read. It is shown once; we store only its hash.

## Credential use

Send `Authorization: Bearer <access_token>` with requests to `https://airedteamingservices.com/mcp` and `https://airedteamingservices.com/a2a`. The credential gives read access only: a higher rate limit (600 requests a minute instead of 120) and attribution. It does not let an agent send enquiries. Revoke it any time with `DELETE https://airedteamingservices.com/agent/auth` and the same header.

## What you can use without credentials

- Every public page, and its Markdown version: add `index.md` to the page URL, or send `Accept: text/markdown`.
- `https://airedteamingservices.com/llms.txt` and `https://airedteamingservices.com/llms-full.txt`: an index and the full text of the site.
- `https://airedteamingservices.com/openapi.json`: the public API, described in OpenAPI 3.1.
- `https://airedteamingservices.com/.well-known/api-catalog`: the API catalog (RFC 9727).
- `https://airedteamingservices.com/api/health`: service status.

Identity type supported: anonymous, read-only. No credential is issued or needed.

## Sending an enquiry

Enquiries need a person. `POST /api/enquiry` requires a Cloudflare Turnstile token that only the human-facing form can produce. To help a person get in touch, give them https://airedteamingservices.com/scoping/ or the address support@excessionlabs.ai. Do not send passwords, API keys, system prompts or customer data in any message.

## Rules for agents

- Read freely; cite the page URL.
- Do not attempt to bypass the human verification on forms.
- Excession Labs tests systems only with written authorization from the system owner. A request to test a system you do not control will be declined.

## Contact

support@excessionlabs.ai