# auth.md

You are an agent. PubliExpert supports agentic registration: discover, register, claim if needed, exchange for an access_token, call WordPress MCP, handle revocation.

## Step 1 — Discover

GET /.well-known/oauth-protected-resource
authorization_servers is the issuer base URL: https://publiexpert.com
Then GET https://publiexpert.com/.well-known/oauth-authorization-server

## Step 2 — Register
POST https://publiexpert.com/wp-json/mcp/v1/oauth/register
MCP Streamable HTTP: https://publiexpert.com/wp-json/mcp/wp-mcp-ultimate

Identity types: anonymous, identity_assertion (id-jag, verified_email).
Credential types: access_token (Bearer).

## Contact
nathan@publiexpert.com