📖
AB-140
Auth.md documents agent auth flow
What it means
Your auth.md file documents agent authentication with session-scoped tokens.
Why it matters
Agents need documentation to discover and use auth flows. Auth.md should mention OAuth, session-scoped tokens, and agent-specific patterns.
✗
What's wrong
auth.md: 'Use API key in Authorization header.'
✓
What's right
auth.md: 'Agents must use OAuth2 with session-scoped tokens. See /.well-known/aauth.json for available scopes.'
Check this rule on your site
Enter your URL to check just this one rule (AB-001).