# auth.md: Interstate Graphics

## Summary

Agents do **not** need credentials to use Interstate Graphics' agent interfaces. Everything public is read-only.

| Interface | URL | Auth |
|---|---|---|
| Public REST API | `https://igiprint.com/wp-json/igi/v1/` (alias `https://igiprint.com/api/v1/`) | none |
| Catalog MCP server | `https://igiprint.com/wp-json/igi/v1/mcp` | none |
| Docs MCP server | `https://igiprint.com/wp-json/igi/v1/docs-mcp` | none |
| WebMCP tools | on igiprint.com pages | none (runs in the user's browser) |

## Getting started (no signup)

```bash
curl -s https://igiprint.com/wp-json/igi/v1/company
curl -s -X POST https://igiprint.com/wp-json/igi/v1/mcp -H 'Content-Type: application/json' -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
```

## Identity types

- **Anonymous agent:** full access to all public endpoints above.
- **Customer accounts:** there is no self-serve customer API. Orders, proofs and invoices are handled by IGI staff; contact web@igiprint.com.
- **Staff/admin:** site administration uses WordPress accounts issued by IGI only. Not available to third-party agents.

## Limits

120 requests/minute per IP across the public API and MCP endpoints. Every response carries `RateLimit-Limit`, `RateLimit-Remaining` and `RateLimit-Reset`; over-limit requests receive HTTP 429 with `Retry-After`.

## Discovery

- OAuth protected-resource metadata: https://igiprint.com/.well-known/oauth-protected-resource (declares no auth required)
- OpenAPI: https://igiprint.com/openapi.json