# auth.md

This website is a public product page. It does not issue accounts, tokens, or OAuth clients.

kicktipp-agent runs on the user's computer. Kicktipp email and password go to a localhost setup page (`kicktipp login --web` or MCP `connect_account`). They do not go to kicktipp-agent.com and they should not go into a chat.

## Agent audience

Agents helping a human install or configure kicktipp-agent. There is no hosted Kicktipp API to call with a bearer token.

## Registration

There is no agent registration endpoint on this origin. Do not POST credentials here.

Install the published package and connect locally:

```
npm install -g kicktipp-agent
kicktipp login --web
```

Claude Desktop: install [kicktipp.mcpb](https://github.com/christianheidorn/kicktipp-agent/releases/latest/download/kicktipp.mcpb) and fill email and password in Desktop. Claude Code: `claude mcp add kicktipp -- npx -y -p kicktipp-agent kicktipp-agent-mcp`, then ask to set up the Kicktipp account.

## Credentials

Stored in `~/.config/kicktipp-agent/config.ini` (mode 600) on the user's machine. Optional session-only storage keeps the login cookie and drops the password.

This origin has no `authorization_endpoint` or `token_endpoint`. Protected Resource Metadata at `/.well-known/oauth-protected-resource` says the same.