# auth.md

THORChain Swap publishes public discovery metadata for agents.

## Audience

This document is for agents and developers inspecting the public THORChain Swap web interface and its public support APIs.

## Current Authentication Model

The public web interface does not require account authentication for browsing.
Wallet connection and transaction signing are performed by user-controlled wallets in the browser; memoless ("instant") swaps work without connecting a wallet.

The swap aggregator backend that powers the UI (https://api.thorchain.org/v1) requires an `x-api-key` header; keys are not self-service — coordinate with the THORChain Swap maintainers.
The memoless API (https://api.thorchain.org/memoless/api/v1) requires no API key.
Keyless access to quotes, pools, and network data is also available through the MCP server at https://swap-preview.horizontalsystems.io/mcp.

The public support APIs documented in the API catalog are unauthenticated at the HTTP layer and enforce per-client rate limits.
The public MCP server at https://swap-preview.horizontalsystems.io/mcp is likewise unauthenticated and rate limited.
This site does not issue or accept bearer tokens and does not provide self-service credential issuance.

## Discovery Metadata

- API catalog: https://swap-preview.horizontalsystems.io/.well-known/api-catalog
- MCP server card: https://swap-preview.horizontalsystems.io/.well-known/mcp/server-card.json

## Agent Registration

Self-service agent registration is not currently enabled.
Teams that need authenticated integration access should coordinate with the THORChain Swap maintainers.

## More

Full developer documentation lives at https://swap-preview.horizontalsystems.io/developers (markdown: https://swap-preview.horizontalsystems.io/developers.md).