# Auth — تكوينات (Takweenat)

Takweenat is an AI business platform for the Saudi market. This file describes how AI agents can register and interact with the platform.

## Agent Registration

Takweenat publishes OAuth/OIDC discovery metadata so AI agents can programmatically discover how to authenticate with future protected APIs:

- **OpenID Connect discovery:** `/.well-known/openid-configuration`
- **OAuth 2.0 authorization server metadata:** `/.well-known/oauth-authorization-server`
- **OAuth protected resource metadata:** `/.well-known/oauth-protected-resource`
- **JWKS (signing keys):** `/.well-known/jwks.json`

The authorization server metadata includes an `agent_auth` block with `register_uri` (this file), supported identity types, and credential types. Agent registration is currently informational; protected API access will be enabled when token-based endpoints launch.

## Discovery Endpoints

- **Agent metadata:** `/.well-known/agent.json`
- **Agent skills index:** `/.well-known/agent-skills/index.json`
- **API catalog (RFC 9727):** `/.well-known/api-catalog.json`
- **ARD manifest:** `/.well-known/ai-catalog.json`
- **MCP server card:** `/.well-known/mcp/server-card.json`
- **Markdown version:** `/index.md`

## Contacting Takweenat

- Email: AI@te.sa
- Phone / WhatsApp: +966 53 460 0062
- Website: https://te.sa/

## Identity & Credential Types

Supported identity types: `oauth_client`. Supported credential types: `client_secret`, `private_key_jwt`. Grant types supported: `authorization_code`, `refresh_token`. Token endpoint auth methods: `client_secret_post`, `client_secret_basic`. Code challenge method: `S256` (PKCE).