# tested.dev auth.md

> Auth for agents lives on the **app** host and is powered by **Better Auth Agent Auth** — not a custom protocol.

## Machine discovery (source of truth)

```http
GET https://app.tested.dev/.well-known/agent-configuration
```

Implemented with `auth.api.getAgentConfiguration` (`@better-auth/agent-auth`).

## Agent-readable companion

```http
GET https://app.tested.dev/auth.md
```

Generated from the same Better Auth APIs (`getAgentConfiguration` + `listCapabilities`).

## OpenAPI

```http
GET https://app.tested.dev/api/auth/reference
```

Better Auth `openAPI()` plugin.

## Human / CI setup (not Agent Auth)

- Install + optional token: https://tested.dev/docs/install
- GitHub App: https://github.com/apps/tested-dev-app
- Full pack: https://tested.dev/llms-full.txt
- Index: https://tested.dev/llms.txt

Do not invent registration URLs. Use only endpoints from the discovery document.