{"rule_id":"AB-008","category":"actionability","icon":"🔑","title":"Authentication Declared","short_description":"Your site declares its authentication method in a machine-readable way.","user_value":"Agents need to know how to authenticate before they can use your API. Without this, they're locked out.","wrong_example":"No machine-readable auth info. Agents don't know if they need API keys, OAuth, or something else.","right_example":"Authentication method is clearly declared, so agents know exactly how to get access.","effort_hint":"moderate","estimated_cost":"$10-50","severity":"medium","pillar":"understandability","version":"1.0.0","counted_in_score":true,"check":{"type":"schema_validation","target":"openapi.securitySchemes"},"fix":{"eligible":true,"type":"assisted","note":"AgentBadge can suggest a securityScheme entry inferred from response headers (e.g. WWW-Authenticate), never auto-applied"},"checklist_anchor":"#AB-008","checklist_url":"/agent-readiness-checklist#AB-008","html_url":"/rules/AB-008","json_url":"/rules/AB-008.json","related_rules":[{"rule_id":"AB-007","title":"Guide and API Consistency","category":"actionability"},{"rule_id":"AB-009","title":"Capability Coverage","category":"actionability"},{"rule_id":"AB-074","title":"A2A Agent Card Published","category":"actionability"},{"rule_id":"AB-075","title":"A2A Agent Card Verified","category":"actionability"},{"rule_id":"AB-085","title":"MCP Server Name Present","category":"actionability"},{"rule_id":"AB-086","title":"MCP Auth Discovery Resolves","category":"actionability"},{"rule_id":"AB-146","title":"Operation descriptions","category":"actionability"},{"rule_id":"AB-159","title":"Business constraints documented","category":"actionability"},{"rule_id":"AB-162","title":"Heartbeat.md availability","category":"actionability"},{"rule_id":"AB-166","title":"next_call pattern in API responses","category":"actionability"}]}