# auth.md — Name Generator Plus

The Name Generator Plus API is **public and requires no authentication**. Agents may call it anonymously. This document follows the WorkOS `auth.md` agent-auth convention (https://workos.com/auth-md) and exists so that automated clients can confirm — in one fetch — that no credential handshake is needed.

## Discover
- Resource server: `https://namegeneratorplus.com`
- API description: [`/openapi.json`](https://namegeneratorplus.com/openapi.json), [`/.well-known/api-catalog`](https://namegeneratorplus.com/.well-known/api-catalog)
- `agent_auth` summary: a single supported identity type, `anonymous`. There is no authorization server, no `register_uri`, no token endpoint, and no `identity_assertion` / `id-jag` flow, because no credential is required.

## Pick a method
Use identity type **`anonymous`**. There is exactly one method and it needs no setup.

## Register
Not applicable. No client registration is required to call the API. There is no `register_uri`.

## Claim
Not applicable. No credential is issued or claimed.

## Use the credential
Send the request with **no `Authorization` header**:
```bash
curl "https://namegeneratorplus.com/api/generate?category=babyname-generator&count=12"
```
Requests are not rate-limited by key. Please be reasonable in volume — this is a free service.

## Errors
The API never returns `401 Unauthorized` and never sends a `WWW-Authenticate` challenge, because authentication is not used. Input problems return structured JSON instead:
```json
{ "status": 404, "error": { "code": "CATEGORY_NOT_FOUND", "message": "Unknown category \"…\".", "hint": "GET /api/categories" } }
```

## Revocation
Not applicable. With no credentials issued, there is nothing to revoke.