# El Stray Mastering Agent Auth

Public content discovery endpoints on elstraymastering.com do not require API keys, OAuth, or cookies.

## Public Agent-Readable Resources

- `https://elstraymastering.com/llms.txt`
- `https://elstraymastering.com/llms-full.txt`
- `https://elstraymastering.com/sitemap.xml`
- `https://elstraymastering.com/.well-known/api-catalog`
- `https://elstraymastering.com/.well-known/agent-skills/index.json`
- Public Markdown alternates advertised from page `Link` headers and HTML `<link>` tags

## Authenticated Or Transactional Areas

Checkout, cart, account, admin, payment, uploads, and form submission flows are browser/user flows rather than public agent APIs. Agents should not attempt to bypass WooCommerce sessions, payment checks, contact form validation, or private WordPress routes.

## Contact

For business enquiries, use the public contact page: `https://elstraymastering.com/contact/`.
