Public access and authentication
Discover
Start at llms.txt, OpenAPI or the developer guide. All advertised journal reads are public. This document is a walkthrough, not a claim of conformance to WorkOS agent_auth.
Pick a method
Use an ordinary HTTP GET, a Markdown representation or the /mcp Streamable HTTP endpoint. No Authorization header is required. OpenAPI declares public operations with an empty security requirement.
Register
Registration does not apply: there are no user accounts or self-serve API keys for public reads.
Claim
Claiming an identity does not apply. No identity_endpoint or claim endpoint is offered. identity_assertion, service_auth and id-jag flows are not implemented.
Exchange
There is no token exchange, access_token or authorization server. Do not invent a token or reuse a credential from a sibling site.
Use credential
No credential is needed. Public access does not authorize private material, mutations, contact requests or deployment. The integration has no protected delegated workflow. An agent’s claimed user-agent or identity grants no extra authority.
Errors
Invalid requests return typed problems; absent records return 404. Rate limits return 429 and Retry-After. No WWW-Authenticate OAuth discovery challenge is needed on keyless reads. A 503 indicates unavailable infrastructure, not successful onboarding. Developer errors.
Revocation
There is no credential or session to revoke. Stop issuing requests to stop using this public interface. Publication changes and corrections require owner review; the public API cannot perform them.
Source
Review: not independently reviewed. Last updated: 2026-10-04. Freshness comes from source/correction dates; month-only sources use their publication date as a disclosed release-date fallback. Work and payment dates are separate.