{
  "schema_version": "alpha-auth-capabilities-v1",
  "generated_at": "2026-09-12T03:42:02.587Z",
  "publisher": {
    "name": "Alpha Governance Group PBC",
    "brand": "Alpha",
    "url": "https://www.alpha.ac",
    "contact": "mailto:hello@alpha.ac"
  },
  "canonical_url": "https://www.alpha.ac/api/public/auth-capabilities",
  "self_serve_signup_available": false,
  "self_serve_key_issuance_available": false,
  "sandbox_available": false,
  "agent_self_registration_available": false,
  "registration": {
    "model": "manual review, credentials issued out of band",
    "request_url": "https://www.alpha.ac/.well-known/agent-registration",
    "documentation_url": "https://www.alpha.ac/auth.md",
    "contact": "mailto:hello@alpha.ac",
    "review_window": "5 business days"
  },
  "no_auth_required": [
    {
      "surface": "Public website",
      "pattern": "https://www.alpha.ac/",
      "notes": "Server-rendered HTML. Readable without JavaScript, an account, or a key."
    },
    {
      "surface": "Public HTTP operations",
      "pattern": "https://www.alpha.ac/api/public/*",
      "notes": "Every operation described at /openapi.json is public: record index, executive and company projections, profile readiness, product access, these auth capabilities, agent readiness, and health."
    },
    {
      "surface": "Discovery documents",
      "pattern": "https://www.alpha.ac/.well-known/*",
      "notes": "API catalog, MCP server card, agent card, agent skills index, and OAuth metadata are all openly readable."
    },
    {
      "surface": "Agent instruction documents",
      "pattern": "https://www.alpha.ac/llms.txt, https://www.alpha.ac/agents.md, https://www.alpha.ac/auth.md",
      "notes": "Markdown instructions describing when to use Alpha and how to retrieve records."
    },
    {
      "surface": "MCP public discovery",
      "pattern": "https://mcp.alpha.ac/mcp",
      "notes": "Public discovery and the read-only capabilities described in the server card require no authentication."
    }
  ],
  "approved_access_required": [
    {
      "surface": "Alpha API authenticated operations",
      "pattern": "https://api.alpha.ac/*",
      "mechanisms": [
        "oauth2 (WorkOS)",
        "api_key (active keys, migration period)"
      ],
      "notes": "Requires an approved organization entitlement. Credentials are issued out of band after manual review."
    },
    {
      "surface": "Alpha MCP premium capabilities",
      "pattern": "https://mcp.alpha.ac/mcp",
      "mechanisms": [
        "oauth2 (WorkOS)",
        "api_key (active keys, migration period)"
      ],
      "notes": "OAuth-capable clients authorize through WorkOS. Active Alpha API keys remain supported during the migration."
    },
    {
      "surface": "Alpha Platform workspaces",
      "pattern": "https://terminal.alpha.ac/",
      "mechanisms": [
        "oauth2 (WorkOS)"
      ],
      "notes": "Human sign-in to an entitled institutional workspace."
    }
  ],
  "related": [
    "https://www.alpha.ac/auth.md",
    "https://www.alpha.ac/openapi.json",
    "https://www.alpha.ac/api/public/product-access",
    "https://www.alpha.ac/products/access",
    "https://www.alpha.ac/developers",
    "https://www.alpha.ac/api/public/agent-readiness"
  ],
  "notes": [
    "Public surfaces are usable by an agent immediately, with no registration step.",
    "Approved access is requested from a person; Alpha does not issue credentials automatically to agents or humans.",
    "Website discovery metadata describes advertised capability. It is not proof that a specific live MCP resource is currently enumerated by the platform server."
  ]
}