---
title: "Snagr auth.md"
url: https://www.snagr.sh/auth.md
---

# Snagr auth.md

Snagr's public documentation surface is anonymous. Agents do not register and do not obtain access tokens. Merchant dashboard data is not available through any public API.

## Audience

AI agents, answer engines and crawlers reading Snagr's public pages, markdown twins, MCP server and product facts.

## Public surface — anonymous, no credentials

Everything an agent or answer engine needs is public and requires no credentials, no API key and no account:

- Every marketing and guide page, and its `.md` twin (`Accept: text/markdown` or append `.md`).
- `/llms.txt`, `/llms-full.txt`, `/ai.txt`, `/openapi.json`
- `/api/md/_catalog`, `/api/md/<path>`, `/api/ai`, `/api/mcp`, `/api/health`
- `/.well-known/api-catalog`, `/.well-known/mcp/server-card.json`, `/.well-known/agent-skills/index.json`, `/.well-known/ai-catalog.json`
- `/.well-known/oauth-protected-resource`, `/.well-known/oauth-authorization-server`

These respond to unauthenticated `GET` requests, send `Access-Control-Allow-Origin: *`, and are cacheable for one hour.

Anonymous identity: there is nothing to claim. `claim_uri` is this document.

## Application surface — session cookie, humans only

The Snagr dashboard (`/analytics`, `/sequences`, `/customers`, `/billing` and the rest) is behind a session cookie issued by [better-auth](https://better-auth.com). Sign-in is by Polar OAuth, Google OAuth, or email and password at https://www.snagr.sh/sign-in.

There is no public REST or GraphQL API for merchant data, and no personal access tokens. An agent cannot read or write a merchant's recovery data. Requests to those paths without a session redirect to `/sign-in`.

The OAuth discovery documents at `/.well-known/oauth-authorization-server` and `/.well-known/oauth-protected-resource` exist so agents can discover that fact. They do not issue tokens for dashboard access.

## Registration

Do not `POST /agent/auth`. There is no agent registration endpoint. To use the public surface, just `GET` it.

## Rate limits

None on the public documents above. Please identify your crawler with a descriptive `User-Agent`.

## Contact

hello@snagr.sh