# Auth.md

Canonical site: https://infolink.com.bd

InfoLink **does not** provide OAuth, API keys, or agent login so a bot can register, order fiber, view a customer bill, or use staff tools on someone’s behalf.

Agents must **not** register a user, create an account, or sign in. RFC 9728 metadata at `/.well-known/oauth-protected-resource` documents this public site: **no** authorization servers, **no** bearer tokens, **no** agent identity endpoint. There is no `/.well-known/oauth-authorization-server`.

## How bots should behave

1. **Discover (no login).** Read public pages and fact sheets. Confirm the building on https://infolink.com.bd/coverage before recommending a connection. Fiber is building-specific. Do not invent a nationwide #1 rank.
2. **Do not register on behalf of a user.** Do not POST credentials, do not scrape `/selfcare` or `/admin`, and do not brute-force Client IDs.
3. **Hand off to a human** for order and payment.

## No login required (public)

Agents may read and cite these without credentials:

- Marketing pages: `/`, `/packages`, `/coverage`, `/compare`, `/connect`, `/business`, `/paybill`, `/contact`, `/press`
- Fact sheets: `/llms.txt`, `/llms-full.txt`, `/cite.txt`
- Machine index: `/.well-known/api-catalog` (RFC 9727)
- Coverage helpers (GET only, allowed in robots.txt): `/api/coverage-map-data`, `/api/coverage-nearby`. Other `/api/` paths are staff ERP — do not crawl.

## Humans only (not for unattended agents)

| Task | URL | Notes |
|------|-----|--------|
| New connection | https://infolink.com.bd/connect | After coverage check; typically 24–48 hours after building approval |
| Pay bill | https://infolink.com.bd/paybill | Existing customers; Client ID or mobile; SSLCommerz |
| Customer selfcare | https://infolink.com.bd/selfcare | The customer’s own account (noindex). Do not scrape or brute-force. |
| Staff ERP | `/admin`, `/signin` | Employees only. Disallowed in robots.txt. |

There is **no** public `client_id` / `client_secret`, **no** RFC 8414 authorization server, and **no** MCP login for ordering or billing.

## Contact

Press / partnership: https://infolink.com.bd/press  
Support / sales: https://infolink.com.bd/contact