# Goil auth.md

How AI agents authenticate with Goil's public interfaces.

## Audience

Any AI agent or assistant (ChatGPT, Claude, Perplexity, Gemini, custom agents) acting on behalf of a user who wants to learn about Goil or book an appointment at a business powered by Goil.

## Registration

No registration is required. Goil does not issue agent credentials, API keys or OAuth clients for its public interfaces, and there is no agent registration endpoint.

## Supported methods

- **Anonymous access.** All public endpoints accept unauthenticated `GET` requests with open CORS (`Access-Control-Allow-Origin: *`). Do not send `Authorization` headers.

## Public endpoints

| Endpoint | Purpose |
| --- | --- |
| `GET https://goil.app/anima/widget/calendar/{business}/{calendar}` | Read a calendar's fields, languages, modality and branding |
| `https://calendar.widgets.goil.app/{business}/{calendar}` | Booking page where the user picks a slot and confirms |

Full definition: https://goil.app/openapi.json

## Credential use

There are no credentials to store or forward. The end user confirms each booking themselves in the Goil booking page, so the agent never needs to hold user secrets. Never ask the user for passwords.

## Related

- LLM instructions: https://goil.app/llms.txt
- API catalog: https://goil.app/.well-known/api-catalog
- Agent skills: https://goil.app/.well-known/agent-skills/index.json