# Auth — Online Legacy

<!-- title: "Agent Authentication — Online Legacy" | canonical: https://online-legacy.com/auth.md | last-updated: 2026-10-01 -->

Online Legacy is a consumer web application without a public REST or MCP API at this time. There is no programmatic authentication flow for external agents. Access to legacy profiles is controlled through private, non-guessable URLs issued by Online Legacy staff after the creation process is complete.

## Discover

Online Legacy does not expose public API endpoints. Agents should interact with the product through:

1. The public homepage — submit a legacy request form
2. The NLWeb /ask endpoint — no authentication required (read-only)
2. The NLWeb /ask endpoint — no authentication required (read-only)

## Agent auth

```
agent_auth:
  identity_endpoint: https://online-legacy.com/api/agent/identity
  identity_types_supported:
    - anonymous
  skill: https://online-legacy.com/auth.md
  notes: >
    Online Legacy does not require agent authentication.
    All public-facing pages, /ask, and /api/ask are open.
    The identity endpoint returns public capabilities and endpoint info.
    Private legacy profiles require a URL token issued by Online Legacy staff.
```

## Pick a method

For unauthenticated read access: no credentials needed. Visit any public URL.

For private profile access: obtain the private profile URL from Online Legacy staff. The URL itself serves as the access credential; no additional token is required.

## Register

No registration is required for public access. To request creation of a legacy profile, submit a request at https://online-legacy.com.

## Claim

Not applicable — no token-based authentication is implemented.

## Exchange

Not applicable.

## Use the access_token

Not applicable. Private profile access is URL-based.

## Errors

Public pages return standard HTTP status codes:
- 200 OK — page or resource found
- 404 Not Found — page does not exist
- 401 Unauthorized — reserved for future admin API

## Revocation

Not applicable.

---

*For questions about access, contact us at https://online-legacy.com/contact*