# Fokuus authentication

## Discover

Read [OpenAPI](https://fokuus.be/openapi.json) and [developer documentation](https://fokuus.be/developers/). The public information API and MCP only read published website content.

## Pick a method

Use anonymous HTTPS requests. No API key, OAuth token, identity assertion or service credential is required or accepted.

## Register, Claim and Exchange

Not applicable: there are no accounts, identity_endpoint, claim endpoint or token exchange. Fokuus does not advertise agent_auth, identity_assertion, service_auth or id-jag support.

## Use the API

GET https://fokuus.be/api/v1/services without an Authorization header. POST MCP JSON-RPC to https://fokuus.be/mcp with Accept: application/json, text/event-stream. There is no access_token.

## Errors

Invalid input returns JSON with error.code, error.message and error.hint. Unknown resources return 404 and unsupported methods 405. No WWW-Authenticate challenge is needed for public resources. Protected website forms retain their existing Turnstile and consent checks and are outside this API.

## Revocation

No credentials are issued, so none need revoking. Do not send personal information, report tokens or secrets to these read-only endpoints.