# auth.md

This host is a web-data API for agents. There is no user sign-up and no OAuth. You do not register an account; you pay.

Audience: autonomous agents and scripts that need public web data as JSON.

## Methods

### Prepaid API key (recommended)

POST https://reddit.fetcher.sh/api/credits/topup?amount=<usd> with an x402 payment (minimum $1). The first top-up returns a `bby_live_` key exactly once. Send it as `Authorization: Bearer bby_live_...` on later calls.

Human path: https://fetcher.sh/topup

### Pay per call (x402)

Call any priced GET with no credential. Sign the 402 `payment-required` challenge and retry. No registration.

## Using the credential

`Authorization: Bearer bby_live_...` on REST and on MCP (`https://reddit.fetcher.sh/mcp`).

## Claim

There is no user-claim ceremony and no extra scopes after claiming. The prepaid key from the first top-up is the full credential. POST https://reddit.fetcher.sh/agent/auth/claim answers `claim_not_supported`.

## What this host does not run

This host does not run OAuth authorization-code or client-credentials, does not accept ID-JAG identity assertions, and has no user-claim ceremony.

Machine docs: https://reddit.fetcher.sh/skill.md · https://reddit.fetcher.sh/.well-known/oauth-protected-resource · https://reddit.fetcher.sh/.well-known/oauth-authorization-server