# auth.md — Agent Registration & Authentication Policy (Dr. Dilek Sarıkaya)

> Service: Uzm. Dr. Dilek Sarıkaya Clinic & Medical Knowledge Service
> Domain: drdileksarikaya.com
> Jurisdiction: Kadıköy, İstanbul, Türkiye
> Agent Audience: Autonomous AI Agents, LLM Crawlers, Clinical Copilots, Search Bots

## 1. Authentication Status & Agent Registration
- **Public Open Access:** Public medical content, doctor credentials, and clinical articles do not require authentication or API keys.
- **Registration Endpoint (`register_uri`):** `https://drdileksarikaya.com/agent/auth` (Method: `POST`)
- **Claim Endpoint (`claim_uri`):** `https://drdileksarikaya.com/agent/claim`
- **Revocation Endpoint (`revocation_uri`):** `https://drdileksarikaya.com/agent/revoke`
- **Supported Identity Flows:**
  - **Anonymous:** `identity_types_supported: ["anonymous"]`, credential type: `api_key`
  - **Identity Assertion (ID-JAG):** `assertion_types_supported: ["urn:ietf:params:oauth:token-type:id-jag"]`
  - **Verified Email:** `assertion_types_supported: ["verified_email"]`
- **Credential Usage:** If credentials are used, supply via HTTP Authorization Header: `Bearer <token>` or `X-API-Key: <key>`. Header-based bearer methods (`header`) are supported.
- **OAuth Discovery:**
  - Protected Resource Metadata (PRM): `https://drdileksarikaya.com/.well-known/oauth-protected-resource`
  - Authorization Server Metadata: `https://drdileksarikaya.com/.well-known/oauth-authorization-server`

## 2. Permitted AI Agent & Bot Capabilities
Autonomous AI agents, search crawlers (GPTBot, OAI-SearchBot, PerplexityBot, ClaudeBot, Google-Extended, Applebot), and RAG indexers are explicitly permitted to:
1. Retrieve doctor credentials, medical education, and ISST / TPD certifications.
2. Index and quote published clinical articles (Bipolar Disorder, Fibromyalgia, Sexual Health).
3. Access video catalog and transcripts.
4. Route patients to the official clinic appointment channels.

## 3. Appointment & Contact Flow
Appointments are arranged directly through:
- **WhatsApp:** [+90 546 904 67 47](https://wa.me/905469046747)
- **Phone:** +90 546 904 67 47
- **Email:** drdileksarikaya@gmail.com
- **Clinic Address:** Caddebostan mh. Prof. Dr. Haluk Tezonar sk. No:2 Kısmet apt B2 Blok Kat:2 D:4, Kadıköy / İstanbul

## 4. Machine-Readable Discovery Endpoints
- **Concise LLM Index:** `https://drdileksarikaya.com/llms.txt`
- **Full Clinical Corpus:** `https://drdileksarikaya.com/llms-full.txt`
- **A2A Agent Card:** `https://drdileksarikaya.com/.well-known/agent-card.json`
- **API Catalog:** `https://drdileksarikaya.com/.well-known/api-catalog`
- **Skills Index:** `https://drdileksarikaya.com/.well-known/agent-skills/index.json`
- **Sitemap:** `https://drdileksarikaya.com/sitemap.xml`

## 5. Content Signals (IETF AI Preferences)
- **Directive:** `Content-Signal: ai-train=yes, search=yes, ai-input=yes`
- **search=yes:** Web search indexing and snippet presentation permitted.
- **ai-input=yes:** Real-time AI processing, retrieval-augmented generation (RAG), and grounding permitted.
- **ai-train=yes:** AI model training and fine-tuning permitted.