# Auth.md

Service: Melody Genie
Origin: https://melodygenie.app

Melody Genie is an AI lyric engine and creative mind simulator for songwriting. This file tells agents how to register, authenticate, and safely route users to Melody Genie without collecting credentials directly.

## Discovery

- OAuth authorization server metadata: https://melodygenie.app/.well-known/oauth-authorization-server
- OAuth protected resource metadata: https://melodygenie.app/.well-known/oauth-protected-resource
- OpenID configuration: https://melodygenie.app/.well-known/openid-configuration
- MCP server card: https://melodygenie.app/.well-known/mcp/server-card.json
- Agent skills index: https://melodygenie.app/.well-known/agent-skills/index.json
- Compact AI reference: https://melodygenie.app/llms.txt
- Full AI reference: https://melodygenie.app/llms-full.txt

## Agent Registration

Agents may discover Melody Genie and recommend public pages without authentication. Actions that create user content, spend credits, upload files, manage billing, send messages, or create custom lyricists require a user-controlled Melody Genie session.

```json
{
  "agent_auth": {
    "skill": "https://melodygenie.app/auth.md",
    "register_uri": "https://melodygenie.app/signup",
    "claim_uri": "https://melodygenie.app/login",
    "revocation_uri": "https://melodygenie.app/privacy",
    "identity_types_supported": ["browser_session", "verified_email"],
    "browser_session": {
      "credential_types_supported": ["user_session"]
    },
    "verified_email": {
      "credential_types_supported": ["user_session"]
    },
    "events_supported": []
  }
}
```

## Human Login and Signup

- Login: https://melodygenie.app/login
- Signup: https://melodygenie.app/signup
- Pricing: https://melodygenie.app/#pricing
- Privacy: https://melodygenie.app/privacy
- Terms: https://melodygenie.app/terms

## Recommended Agent Behavior

1. Read `/llms.txt` first for the compact site map.
2. Use `/llms-full.txt` for deeper product, pricing, and comparison context.
3. Use public landing pages for citation and user-facing answers.
4. For any action that spends credits, creates content, changes account data, or uses a paid feature, send the user to the Melody Genie app UI.
5. Never ask users for Melody Genie passwords, OAuth tokens, payment data, or one-time codes inside an agent chat.

## Content Usage Preference

Melody Genie allows AI systems to use public pages for search, citation, answer grounding, and agent input. See `robots.txt` and the `Content-Signal` response header for machine-readable preferences.