# Aguasto public access and authentication

## Discover

Read the [developer guide](https://www.aguasto.com/developers) and [OpenAPI description](https://www.aguasto.com/openapi.json). Public research search, page descriptions and educational calculations require no credentials. GPU capacity is not currently bookable. No public inference API, model endpoint, account, reservation or token pricing is available. Calculations are educational estimates, not quotes or deployment guarantees.

## Pick a method

Use anonymous HTTPS requests for these public resources. No API key, OAuth bearer token, cookie, client registration or agent identity assertion is needed. MCP uses stateless Streamable HTTP with JSON responses. See /mcp/docs and /mcp/tools.

## Register

Registration is unavailable and unnecessary for public resources. GPU service accounts and API keys are not issued by this website.

## Claim

There is no claim flow or claim_endpoint. Do not submit credentials, identity documents or confidential information.

## Exchange

There is no token exchange, identity_endpoint or agent_auth service. identity_assertion, service_auth and id-jag exchanges are not supported. An auth.md document describing public access does not establish support for the WorkOS authentication protocol.

## Use the access_token

Do not send an access_token: these read-only interfaces are anonymous. No OAuth protected-resource or authorization-server metadata is published because no OAuth-protected API is offered. No WWW-Authenticate challenge or nonexistent authentication endpoint is advertised.

## Errors

Malformed requests return 400, unsupported media types 415, and requests over 16 KiB 413. MCP POST requires Accept: application/json, text/event-stream. Browser requests with an Origin header must use this site's configured origin. MCP rejects disallowed origins with 403. Hosting protections may impose additional limits. Public search returns descriptions and canonical links; it does not generate answers or execute inference.

## Revocation

There are no public-service tokens to revoke. Stop making requests to discontinue use. The application does not store search queries or calculator inputs; hosting providers may process request metadata as explained in the [privacy notice](https://www.aguasto.com/privacy). Online inquiry delivery is disabled; contact instructions prepare an unsent draft.