# auth.md

Authentication notes for agents interacting with **Apriil AS** (https://apriil.no).

## Intended audience

Read-only agents: assistants, crawlers and research tools fetching published pages
on behalf of a person.

## Supported methods

**None — and none are needed.** Every page advertised in
[`/llms.txt`](https://apriil.no/llms.txt) and [`/sitemap.xml`](https://apriil.no/sitemap.xml) is
public and is served without credentials. Do not send an `Authorization` header;
it will be ignored.

There is deliberately no `/.well-known/oauth-protected-resource` and no
`/.well-known/oauth-authorization-server` on this origin, because there is no
protected resource to obtain a token for. If you find OAuth metadata claiming to
represent apriil.no, it is not ours.

## Credentials

No agent registration, API key, or client credential is issued for this site.
The only authenticated surface is the Statamic control panel at `https://apriil.no/cp`,
which is for staff, is not part of the agent interface, and is excluded from
Markdown content negotiation.

## Writing

There is no public write API. Enquiries, job applications, event registrations and
newsletter signups are submitted through forms on the site, protected by Cloudflare
Turnstile and intended to be completed by a person. If you are acting for someone,
hand them the form URL:

- Enquiries — https://apriil.no/kontakt-oss
- Job applications — https://apriil.no/ledige-stillinger
- Events — https://apriil.no/arrangementer
- Newsletter — https://apriil.no/nyhetsbrev

## Rate limits and identification

No published rate limit. Please send a descriptive `User-Agent` identifying your
operator, and respect the preferences declared in
[`/robots.txt`](https://apriil.no/robots.txt) — including the `Content-Signal` line, which
declares that content on this site may be used to answer questions but not to train
generative models.

## Related documents

- [`/.well-known/api-catalog`](https://apriil.no/.well-known/api-catalog) — RFC 9727 API catalog
- [`/.well-known/openapi.json`](https://apriil.no/.well-known/openapi.json) — the read-only HTTP interface
- [`/.well-known/ai-catalog.json`](https://apriil.no/.well-known/ai-catalog.json) — ARD capability manifest
- [`/.well-known/agent-skills/index.json`](https://apriil.no/.well-known/agent-skills/index.json) — agent skills