A2UI Atomic Catalog — Authentication & Security Docs

Developer & Agent Documentation

Authentication and security documentation for developers and AI agents integrating with the A2UI Atomic Catalog.

Public Unauthenticated Access

The primary MCP server (https://a2uicatalog.ai/mcp) and public REST endpoints (/api/compose, /ask, /spec.json) require no API key and no account signup. Clients can send requests immediately.

Auth Documentation & Policies

• Authentication Guide (Markdown) — architectural explanation and OAuth discovery
• Auth & Rate Limits — per-endpoint rate limits and enforcement policies
• OAuth Authorization Server Metadata (RFC 8414)
• OAuth Protected Resource Metadata (RFC 9728)
• OpenAPI 3.1 Specification
• MCP Server Endpoint