# Agent access

Public APIs and MCP reads require no credentials. Production OAuth issuance and revocation are unavailable (HTTP 503). Contact delivery uses durable idempotency and shared limits when configured. Use /api/v1/sandbox/contact for zero-mutation validation. Full access and retry contract: https://zainahmed.net/auth.md