# Auth.md: LRRK Published Archive Agent authorization

The existing service authorization is a GitHub-backed authorization-code flow with PKCE. Its only service scope is `archive.read`.

- Authorization-server metadata: <https://agents.lrrk.ai/.well-known/oauth-authorization-server>
- A2A protected-resource metadata: <https://agents.lrrk.ai/.well-known/oauth-protected-resource/a2a>

There is no autonomous client registration and no write capability. This guide describes the existing read-only service; it does not grant access.