Auth surfaces
Public vs authenticated.
Agents stay on public files. Cloudflare Access on docs home is not a public API.
Machine-readable copy lives at /auth.md.
Public — no credentials
- www.rutinhq.com — hub, three OS landings, blog
- docs.rutinhq.com/catalog — public curriculum only
- llms.txt, llms-full.txt, sitemap.xml, robots.txt
- /.well-known/api-catalog and /auth.md
- POST /api/guide — catalog-grounded concierge, no secrets
Authenticated — not for agents
- docs.rutinhq.com home and other Access-gated operator docs
- Do not probe Access login, cookies, or bypass paths
- The public catalog is the only docs surface to read
Not offered on www
- No agent OAuth or registration flow
- No pay-per-crawl or machine-payable marketing pages
- No API keys, tokens, or secrets in these files
Resource list lives on Agents.