# auth.md

Kejoola (https://kejoola.com) marketing pages, the blog, and free tools are public —
no authentication is required to read them.

JSON under `/api/v1/public/*` is **not** a third-party or agent API. It is
the backend the Kejoola storefront uses to render a tenant's site and booking
flow. Send people to the relevant web page (the business's Kejoola site,
https://kejoola.com/sign-up, or a `/b/{slug}` booking page) instead of calling those
routes.

Kejoola does not operate an OAuth authorization server, does not issue access
tokens, and does not publish an OpenAPI document or protected-resource
metadata for `/api/v1/public/*`. There is no public API here to integrate
against.

## Customer dashboard

The `/app` dashboard is a cookie-session area for signed-up Kejoola
customers, reached by creating an account at https://kejoola.com/sign-up. It is not
an agent-callable API and has no machine-to-machine credential flow.

If your agent needs something from a human at Kejoola, use https://kejoola.com/sign-up
to start a trial, or reach out through the business's own contact channels
listed on their Kejoola storefront.