# Authentication for Rafmennt public browsing

## Discover

Read the [agent directory](https://www.rafmennt.is/.well-known/ard.json) and [API description](https://www.rafmennt.is/agent/openapi.json). Public page reading, course/event lookup, search, MCP and NLWeb require no account, API key or bearer token.

## Pick a method

Use anonymous access for the published public information described here. Registration, claim, token exchange and revocation steps do not apply: this service issues no agent credentials and exposes no agent identity endpoint or OAuth authorization server. Do not send an access_token or user credentials to the public browsing interface.

## Use the public interface

Call GET https://www.rafmennt.is/agent/search?q=ljosleidarar or connect an MCP client to https://www.rafmennt.is/mcp using Streamable HTTP. Read only paths returned by the public catalogue. Do not send personal data in a query.

## Errors and limits

Invalid requests receive a 400 response; unpublished or unknown documents receive 404. Honor a 429 response and Retry-After if returned by the hosting layer. No public tool grants CMS permissions, submits applications or performs payments. The private CMS uses a separate staff sign-in flow and is not an agent API.