# C∞A∞I∞O auth.md

How AI agents get access to C∞A∞I∞O (CAIO) at chrismai.ai. Short version: there is nothing to register for. The public chat API needs no credentials, and there is no OAuth server.

## Audience

AI agents acting for a person who wants to ask C∞A∞I∞O about a website, a redesign, hosting, or an AI chat bot for their business, or who wants to reach a human directly.

## Access model

- **Public chat endpoints, no credentials.** The chat API described in [/openapi.json](https://chrismai.ai/openapi.json) (guide: [/docs/api](https://chrismai.ai/docs/api)) is open. Base URL: `https://chrismai.ai/api/chat` (same-origin endpoint for the C∞A∞I∞O chat widget).
- **Scoped per workspace.** Every call names a `workspace_id`. C∞A∞I∞O's own chat is `chrismai`. Browser calls must come from an origin the workspace allows; server-side agents send no `Origin` header and are not affected.
- **Scoped per conversation.** You choose a `visitor_id` (`v_` plus 16-60 random URL-safe characters) when you start a conversation and send it on every later call. It is the only thing that proves the conversation is yours. Keep it private and never reuse one across different people.
- **No API keys, OAuth, OIDC, Web Bot Auth or agent registration.** There is no `/agent/auth`, no authorization server and no token endpoint. Do not look for one.
- **Operator and admin endpoints** (the operator inbox, bot setup for paying clients) use credentials C∞A∞I∞O issues to its own staff and clients. They are not available to third-party agents.

## Credential use

None. Send JSON with `content-type: application/json`. Do not send `Authorization` headers to the public endpoints; they are ignored.

## Limits

20 new conversations and 40 messages per 10 minutes per IP, 2,000 characters per message, 60 messages per conversation. Honour `Retry-After` on HTTP 429. Every conversation is read by a human, so use it for real requests, not automated tests.

## Getting a bot or a website (for businesses)

- **Website plans and the AI chat bot:** every project is quoted per project. Email [_@schizophrenicfreak.dev](mailto:_@schizophrenicfreak.dev) for a quote. There is no public checkout, and agents cannot pay on a user's behalf through an API.
- **In-chat self-serve sign-up** for the AI chat bot is coming soon and is not available yet.
- **Anything else, or a custom quote:** email [_@schizophrenicfreak.dev](mailto:_@schizophrenicfreak.dev), or ask the chat to hand you to a human. Our team works remotely.

## Discovery

- API catalog: [/.well-known/api-catalog](https://chrismai.ai/.well-known/api-catalog)
- Agent skills: [/.well-known/agent-skills/index.json](https://chrismai.ai/.well-known/agent-skills/index.json)