# fatcalendar auth.md

fatcalendar needs **no authentication**. The website, REST API (`https://fatcalendar.com/api/v1`), MCP server (`https://fatcalendar.com/mcp`), A2A endpoint (`https://fatcalendar.com/a2a`) and NLWeb endpoint (`https://fatcalendar.com/ask`) are public and anonymous.

## For agents

- Audience: any AI agent or client. No registration, sign-up, credential issuance or token exchange exists, so there is nothing to provision.
- Do not send an `Authorization` header; it is ignored.
- Scopes: none. Every operation is read-only.
- Token lifetime: not applicable.
- Abuse protection: anonymous rate limit of 120 requests per 60 seconds per client, advertised in `RateLimit` and `RateLimit-Policy` response headers. Exceeding it returns HTTP 429 with `Retry-After`.

## Example

```bash
curl 'https://fatcalendar.com/api/v1/calendar/day?tradition=telugu&place=Hyderabad'
```

See also [AGENTS.md](https://fatcalendar.com/AGENTS.md) and [llms.txt](https://fatcalendar.com/llms.txt).