# Semcem auth.md

This document describes how AI agents authenticate with the Semcem API.

## Resource

Protected API base URL: `https://semcem.com/api/v2`

OAuth Protected Resource Metadata: `https://semcem.com/.well-known/oauth-protected-resource`

## Authorization server

Issuer: `https://semcem.com`

OAuth Authorization Server metadata: `https://semcem.com/.well-known/oauth-authorization-server`

## Registration

Agents and integrations can register API users via:

- `POST https://semcem.com/api/v2/auth/signup` — create a customer account
- `POST https://semcem.com/api/v2/auth/login` — exchange email and password for a bearer token

## Credentials

Use the `Authorization: Bearer <token>` header on protected endpoints.

Supported scopes: `api:read`, `api:write`, `profile`.

## Anonymous access

Public catalog, search, and product endpoints are available without a token.