# 7ball.com.br auth.md

## Audience

AI agents that need authenticated access to the protected Novamira MCP endpoint on 7ball.com.br.

## Public read-only access

Most site discovery and content APIs are public and do not require authentication:

- `/.well-known/api-catalog`
- `/.well-known/agent-skills/index.json`
- `/wp-json/conversion-agent-discovery/v1/*`

## Protected resource

- Resource: `https://7ball.com.br/wp-json/mcp/novamira`
- Protected Resource Metadata: `/.well-known/oauth-protected-resource`

## Registration

7ball.com.br uses WordPress Application Passwords for MCP access.

1. Sign in to WordPress as an authorized user.
2. Open `https://7ball.com.br/wp-admin/profile.php#application-passwords-section`.
3. Create a new Application Password for your agent client.
4. Send HTTP Basic Auth to `https://7ball.com.br/wp-json/mcp/novamira` using the username and generated application password.

Do not submit public contact forms automatically. Use the public contact handoff URL only.

## Supported credentials

- `application_password` via HTTP Basic Auth

## Revocation

Revoke Application Passwords from the same WordPress profile screen.