# Agent authentication — Texas Builders Guide

Site: https://texasbuilders.guide

## What is open

The website itself is public: builder profiles, community profiles, search, the
map, and the mortgage calculator are all readable without an account. Browser
agents can also use the site's WebMCP tools with no credentials.

## What requires a user

Every tool on the MCP server requires an access token issued on behalf of a
signed-in user of this site — directory search and profile reads included, as
well as favorites and saved searches.

## How to register and authenticate

1. Discover the protected resource:
   `https://texasbuilders.guide/.well-known/oauth-protected-resource`
2. Discover the authorization server:
   `https://texasbuilders.guide/.well-known/oauth-authorization-server`
3. Register dynamically (RFC 7591) at the `register_uri` in the `agent_auth`
   block. No pre-registration or human paperwork is required.
4. Run the OAuth 2.1 authorization-code flow with PKCE (`S256`). The user
   signs in to Texas Builders Guide and approves your client on the site's
   consent screen.
5. Send the resulting token as `Authorization: Bearer <token>` to the MCP
   endpoint listed in `/.well-known/mcp/server-card.json`.

- Identity type: human-delegated only. There are no machine-only credentials,
  API keys, or service accounts.
- Credential type: OAuth 2.1 authorization code + PKCE.
- Revocation: the user can revoke a connected client from their account page at
  https://texasbuilders.guide/account.

## Rules for agents

- Never claim a home is available, priced, or zoned to a school without linking
  the source profile page; school zoning must always be confirmed with the
  district.
- Do not submit builder claim requests or lead forms on a user's behalf without
  their explicit confirmation.

## Contact

contact@newplacetexas.com