# Access

Every page, file and endpoint on this site is public. No credential exists and nothing is gated. The sections below follow the usual access headings so a client that looks for them finds a plain answer.

## Discover

Start at `/llms.txt` or `/agents.md`. There is no authorization server, no protected resource and no `/.well-known/oauth-*` document, because there is nothing to protect.

## Pick a method

Use plain HTTP with no credential. Pages and files take GET: ask for `Accept: text/markdown` or fetch the `index.md` twin of any page. The MCP server at `/mcp` takes JSON-RPC over POST; the REST API under `/api/v1/` and the NLWeb endpoint at `/ask` take GET, or POST with a JSON body. No method needs a token.

## Register

There is nothing to register: a client ID, an account or an application form would have no use here.

## Claim

There is nothing to claim. A company that wants a row corrected or added uses `/corrections/` or `/directory/submit/`; those forms are not connected to a backend yet, so they receive nothing.

## Exchange

No token exchange exists. The site publishes no OAuth metadata (no `/.well-known/oauth-authorization-server`, no `/.well-known/oauth-protected-resource`) because it has no authorization server: no endpoint, the MCP server and the API included, takes a token or a key. The machine-readable form of this statement is `security: []` with no security schemes in `/openapi.json`. Do not send an Authorization header; it is ignored.

## Use

Fetch any URL listed in `/sitemap.xml`, `/llms.txt` or `/llms-full.txt`. The directory is downloadable as CSV and JSON from `/data/`, or queryable through `/mcp`, `/api/v1/` and `/ask` as `/developers/` describes. Be polite: cache what you fetch and re-read after the edition date changes.

## Errors

A path that does not exist returns HTTP 404 directly; under `/api` the 404 is JSON with a code, a message and a hint. There are no 401 or 403 answers because nothing is protected. The API and the MCP server allow 120 requests a minute per address, announced in RateLimit headers; a 429 carries Retry-After, and the host may add its own 429 above that. Wait that long and try again. A 5xx is a hosting fault; retry later.

## Revocation

Nothing is issued, so nothing can be revoked. The MCP server and the API are read-only and hold no accounts.