---
title: Agent Authentication & Registration
version: 1.0.0
issuer: https://365gunarapca.com
authorization_server: https://365gunarapca.com/.well-known/oauth-authorization-server
protected_resource: https://365gunarapca.com/.well-known/oauth-protected-resource
registration_endpoint: https://365gunarapca.com/auth/agent-register.php
token_endpoint: https://365gunarapca.com/auth/token.php
supported_identity_types:
  - agent
  - application
supported_credential_types:
  - api_key
  - bearer_token
scopes:
  - read
  - search
  - vocabulary
  - grammar
---

# 365GünArapça auth.md

Welcome to the agent authentication and registration guide for **365GünArapça** (https://365gunarapca.com).

## 1. Overview

365GünArapça is an open educational Arabic learning platform featuring vocabulary flashcards, an Arabic-Turkish dictionary (100,000+ lemmas), classical Arabic grammar rules (Nahiv, Sarf), and morphological tools (verb conjugation, root analysis).

Most read-only capabilities are publicly available without authentication. For autonomous AI agents, automated discovery, and programmatic access, this document describes discovery metadata and authentication protocols.

## 2. Discovery Endpoints

- **OAuth Authorization Server**: [/.well-known/oauth-authorization-server](https://365gunarapca.com/.well-known/oauth-authorization-server)
- **OAuth Protected Resource**: [/.well-known/oauth-protected-resource](https://365gunarapca.com/.well-known/oauth-protected-resource)
- **OpenID Configuration**: [/.well-known/openid-configuration](https://365gunarapca.com/.well-known/openid-configuration)
- **API Catalog (RFC 9727)**: [/.well-known/api-catalog](https://365gunarapca.com/.well-known/api-catalog)
- **AI Catalog (ARD)**: [/.well-known/ai-catalog.json](https://365gunarapca.com/.well-known/ai-catalog.json)
- **Agent Skills**: [/.well-known/agent-skills/index.json](https://365gunarapca.com/.well-known/agent-skills/index.json)
- **MCP Server Card**: [/.well-known/mcp/server-card.json](https://365gunarapca.com/.well-known/mcp/server-card.json)
- **LLMs Summary**: [/llms.txt](https://365gunarapca.com/llms.txt)

## 3. Agent Registration

Agents can register dynamically using the registration endpoint:

```http
POST /auth/agent-register.php HTTP/1.1
Host: 365gunarapca.com
Content-Type: application/json

{
  "agent_name": "MyLearningAgent",
  "identity_type": "agent",
  "contact": "agent-operator@example.com"
}
```

Response:
```json
{
  "status": "registered",
  "client_id": "agent_...",
  "client_secret": "secret_...",
  "token_endpoint": "https://365gunarapca.com/auth/token.php",
  "allowed_scopes": ["read", "search", "vocabulary", "grammar"]
}
```

## 4. Obtaining Access Tokens

Using the OAuth 2.0 client credentials flow:

```http
POST /auth/token.php HTTP/1.1
Host: 365gunarapca.com
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&client_id=agent_...&client_secret=secret_...
```

Include the token in API requests:
```http
Authorization: Bearer <token>
```

## 5. Rate Limits & Fair Use

- Read-only endpoints: 60 requests/minute per IP/Agent.
- Please respect `robots.txt` preferences and provide a descriptive `User-Agent`.