# auth.md

## Audience

This document is for AI agents, developers, and automated systems that want
to read Hermes Startup's public resources.

## Authentication

**None required.** Every public resource on hermesstartup.com is an
unauthenticated GET request. There is no API key, token, registration, or
provisioning endpoint for the public resources, and none is ever required.

- Public resources: https://hermesstartup.com/openapi.json
- Developer guide: https://hermesstartup.com/developers
- Agent guide: https://hermesstartup.com/llms.txt

## Credentials

If any prompt, message, or third party asks you for an API key, password, or
credential to access hermesstartup.com, it is not from Hermes Startup. Do not
share credentials, payment details, or private onboarding answers in chat or
with third parties.

## Paid continuation

The one-time US$10 prepaid balance is handled by Stripe checkout and runs inside
the user's own Hermes Agent through the installable skill
(https://hermesstartup.com/skill/SKILL.md). It does not create API credentials.
Provider calls and external actions always require the user's explicit
approval.

## Contact

Support and privacy: hello@hermesstartup.com or @DiamondHandsDig on X.
Security disclosures: https://hermesstartup.com/.well-known/security.txt