# Reef Label auth.md

> Reef Label (https://reeflabel.com) is a public, read-only reference. Agents need no account, registration, credential or token.

## Audience

AI agents and automated clients reading Reef Label: sunscreen laws by location, product ingredient verdicts, and ingredient data.

## Registration

None. Reef Label has no agent registration or provisioning endpoint, no sign-in, and issues no credentials. There is no `POST /agent/auth`, no OAuth protected-resource metadata (`/.well-known/oauth-protected-resource`) and no authorization server (`/.well-known/oauth-authorization-server`). Do not send `Authorization` headers; they are ignored.

Supported methods: `none` (anonymous, unauthenticated reads).

## Access

- Every page is public over HTTPS `GET`. There is no write API.
- Structured data, no auth: https://reeflabel.com/data/index.json (manifest), described by https://reeflabel.com/openapi.json.
- MCP server, no auth: https://reeflabel.com/mcp (Streamable HTTP, read-only tools). Connect without credentials.
- Markdown for agents: send `Accept: text/markdown`, or append `index.md` to a page URL.
- Site overview: https://reeflabel.com/llms.txt
- Sitemap: https://reeflabel.com/sitemap-index.xml
- Crawl rules: https://reeflabel.com/robots.txt
- Terms of use (includes automated reading and citation): https://reeflabel.com/terms/

## Credential use

There are no credentials. Identify your client with an honest `User-Agent`, keep request rates modest, and cache responses (the data files change only when the dataset is reviewed; `Cache-Control` says how long).

## Contact

Questions or higher-volume needs: legal@reeflabel.com