# Cyclr Agent Authentication

Cyclr's public website agent endpoints are currently read-only and do not require authentication.

## Public read-only endpoints

- `/.well-known/agent-markdown?url=/path/`
- `/.well-known/agent-skills/index.json`
- `/wp-json/cyclr-agent/v1/status`
- `/wp-json/cyclr-agent/v1/search`
- `/wp-json/cyclr-agent/v1/page`
- `/wp-json/cyclr-agent/v1/content-index`
- `/wp-json/cyclr-agent/v1/connectors`
- `/wp-json/cyclr-agent/v1/recommend`
- `/wp-json/cyclr-agent/v1/openapi.json`

## Agent policy

Agents may search, retrieve and cite public Cyclr website content. Agents should cite the canonical Cyclr page URL rather than the Markdown fallback endpoint.

Agents must not submit demo, trial, contact or Formidable Forms entries automatically. Form completion may be assisted in the browser, but final submission should remain user-reviewed and user-confirmed.

## Authenticated APIs

Authenticated Cyclr product APIs, customer data, CRM data, Formidable entries, HubSpot data and WordPress administration endpoints are not exposed through the public website agent interface.