# auth.md

JumbleFix agent authentication guide for https://jumblefix.com.

## Audience

AI agents and automated clients that call the public JumbleFix dictionary API.

## Registration

No registration is required. The unscramble and word lookup APIs are public and do not issue credentials.

## Methods

- **anonymous**: Call HTTP endpoints directly with no Authorization header.
- Provisioning endpoint: none (public API).
- Credentials: none.

## How to call the API

1. Read the OpenAPI description at https://jumblefix.com/openapi.json
2. POST JSON to https://jumblefix.com/api/unscramble with a `letters` field
3. GET https://jumblefix.com/api/words/{word} for definitions
4. Prefer https://jumblefix.com/api/health before bulk traffic

## OAuth

JumbleFix does not operate an OAuth authorization server for these public endpoints. Protected-resource metadata at `/.well-known/oauth-protected-resource` documents that the resource is public and anonymous access is supported.