# auth.md — Midas Aceleradora

> Machine-readable authentication and agent-registration metadata for
> `https://aceleradoramidas.com.br`, following the auth.md convention
> (https://workos.com/auth-md, https://github.com/workos/auth.md).

Last updated: 2026-07-30

Skill: https://isitagentready.com/.well-known/agent-skills/auth-md/SKILL.md

## Overview

Midas Aceleradora is an institutional website for a startup accelerator
(Google for Startups official partner, Brazil). It publishes marketing,
portfolio, benefits and blog content, plus a public read-only MCP server.

**All public content is available without authentication.** Agents,
crawlers and LLMs may read every public page, every discovery resource
and every MCP tool listed below with no credentials, no API key, no
token and no registration step.

## Discovery documents

| Resource | URL | Content type |
| --- | --- | --- |
| Auth.md (this document) | `/auth.md` | `text/markdown` |
| Protected-resource metadata (RFC 9728) | `/.well-known/oauth-protected-resource` | `application/json` |
| Authorization-server metadata (RFC 8414) + `agent_auth` | `/.well-known/oauth-authorization-server` | `application/json` |
| OpenID Connect discovery | `/.well-known/openid-configuration` | `application/json` |
| MCP Server Card | `/.well-known/mcp/server-card.json` | `application/json` |
| Agent Skills index | `/.well-known/agent-skills/index.json` | `application/json` |
| Resource catalog (RFC 9727) | `/.well-known/api-catalog` | `application/linkset+json` |
| OpenAPI + MPP payment discovery | `/openapi.json` | `application/json` |
| Curated index for LLMs | `/llms.txt` | `text/plain` |
| Full inline content for LLMs | `/llms-full.txt` | `text/plain` |
| Human/agent API docs | `/docs/api` | `text/html` |
| Sitemap | `/sitemap.xml` | `application/xml` |
| Crawler policy + Content Signals | `/robots.txt` | `text/plain` |

The `agent_auth` block is published in
`/.well-known/oauth-authorization-server` and mirrored in
`/.well-known/oauth-protected-resource`. The canonical authorization
server is the issuer listed in the protected-resource metadata; its own
RFC 8414 and OpenID discovery documents are authoritative.

Rate limits: none enforced for normal crawling. Please identify your
agent with a descriptive `User-Agent`.

## Agent registration

### Supported identity types

`identity_types_supported`: `["anonymous", "human"]`

#### 1. Anonymous (recommended, complete flow)

- `credential_types_supported`: `["none"]`
- `register_uri`: not required — no registration step
- `claim_uri`: `https://aceleradoramidas.com.br/admin/login`
- Scope: all public pages, all discovery documents above, and every tool
  of the public MCP server at
  `https://smemfllqjewaiggpazfw.supabase.co/functions/v1/mcp`
  (`get_planos`, `list_beneficios`, `list_startups`, `get_contato`,
  `search_site`).

An agent simply issues plain HTTPS `GET` requests, or MCP JSON-RPC calls
with `Accept: application/json, text/event-stream`. No bearer token, no
API key, no client credential.

#### 2. Human (delegated)

- `credential_types_supported`: `["email_password", "oauth_google"]`
- `register_uri`: `https://smemfllqjewaiggpazfw.supabase.co/auth/v1/oauth/clients/register`
  (OAuth 2.0 dynamic client registration on the delegated authorization
  server)
- `claim_uri`: `https://aceleradoramidas.com.br/admin/login`
- `revocation_uri`: not published — sessions are revoked by the operator
  on request via `contato@aceleradoramidas.com.br`
- `events_supported`: none

Used only by staff and ambassadors. Browser sessions are never intended
to be copied, pasted or reused as agent credentials. We do not issue
delegated agent tokens, service accounts, personal access tokens or API
keys automatically.

If you need programmatic access to non-public data, email
`contato@aceleradoramidas.com.br` and describe your use case; access is
granted manually after human review.

## Restricted paths

These paths are private, require a human sign-in, and are disallowed in
`/robots.txt`. Agents must not attempt to access or authenticate against
them:

- `/admin`, `/admin/`, `/admin/login`
- `/embaixador/painel`
- `/checkout`
- `/reset-password`
- `/unsubscribe`

## Payments

Paid offerings are declared for agents via MPP payment discovery in
`/openapi.json` (`x-payment-info` extensions). The annual acceleration
program is R$ 2.500 (PIX) or R$ 2.800 in up to 12 card installments.
Payments are processed by Asaas through the human checkout flow; agents
must not attempt to complete a payment autonomously.

## Content usage preferences

Declared as Content Signals in `/robots.txt`:

```
Content-Signal: search=yes, ai-input=yes, ai-train=no
```

Search indexing and citation/grounding in AI answers are welcome; use of
this content for model training is not permitted.

## Contact and policies

- Email: `contato@aceleradoramidas.com.br`
- WhatsApp: `+55 (61) 99675-4310`
- Terms of use: `https://aceleradoramidas.com.br/termos`
- Privacy policy: `https://aceleradoramidas.com.br/privacidade`
- App privacy policy: `https://aceleradoramidas.com.br/privacidade-app`