# HTEC LMS - AI Agent Authentication & Registration (auth.md)

Welcome to **HTEC Learning Management System** (Empowering Health Technology Education in Bangladesh).
This document provides instructions for AI agents and automated services to register, authenticate, and access HTEC APIs.

## 1. Overview
HTEC provides RESTful API endpoints for course discovery, student tools, exam management, and academic resources.
AI agents must follow standard OAuth 2.0 authentication protocols when accessing protected resources.

## 2. Discovery Endpoints
- **API Catalog**: `/.well-known/api-catalog` (RFC 9727)
- **OpenID Configuration**: `/.well-known/openid-configuration`
- **OAuth Authorization Server**: `/.well-known/oauth-authorization-server`
- **OAuth Protected Resource**: `/.well-known/oauth-protected-resource` (RFC 9728)
- **MCP Server Card**: `/.well-known/mcp/server-card.json`
- **Agent Skills Discovery Index**: `/.well-known/agent-skills/index.json`

## 3. Dynamic Agent Registration
Agents can register dynamically via the registration endpoint:
- **Registration URI**: `https://htec-edu.com/api/v1/agent/register`
- **Supported Identity Types**: `did:web`, `x509`, `bearer_token`
- **Supported Credential Types**: `jwt`, `api_key`

## 4. API Scopes
- `read:courses` - Access public and enrolled course lists
- `read:subjects` - Access subject directories and curriculums
- `read:notices` - Read platform announcements
- `write:omr` - Submit OMR scan sheets for automated evaluation