# auth.md: SATCoach

How AI agents get access to SATCoach.

## No credentials needed

The SATCoach MCP server at `https://mcp.satcoach.ai/mcp` (Streamable HTTP; also `https://satcoach.ai/mcp`) needs no credentials. All of its tools are public: `about_satcoach`, `skill_check`, and `share_family_context`. Connect and call them directly. There is no account, API key, or OAuth client to set up, and agents can't register for one. Today any request with an `Authorization` header gets HTTP 401, so don't send one; there's no key to ask the parent for yet.

The public tools return SATCoach's public product facts and next steps, never any student's data. `share_family_context` needs the parent's agreement, not a credential: show the parent exactly what will be sent, get a yes, and pass `consent: true`.

## Acting for a parent (coming in a later release)

Parent keys aren't available yet. In a later release:

1. **Get a key.** A parent who uses SATCoach creates one from the "Use SATCoach in your AI assistant" button in the weekly parent email or on the parent dashboard. It's shown once.
2. **Use it.** Send `Authorization: Bearer <key>` to `https://mcp.satcoach.ai/mcp`. Clients that accept only a URL use the parent's personal connector link instead. Treat both like a password.
3. **Scope.** A key reads only that parent's own children's SAT prep (progress, focus areas, the published diagnostic, tutor updates, and this week's plan), and can share SAT goals and test dates for those children. It can't change a student's records, see other students, or reach billing.
4. **Revocation.** The parent revokes a key in Settings. A revoked or invalid key gets HTTP 401; stop and ask the parent for a new one.

Until then, use the public tools above.

## OAuth

Not supported yet. `/.well-known/oauth-protected-resource` and `/.well-known/oauth-authorization-server` are not published.

## Limits

- `share_family_context`: 5 requests per connection per hour, and 2 requests per email address per day.
- Every tool is rate-limited.

## Discovery

- Server card: https://satcoach.ai/.well-known/mcp/server-card.json
- API catalog: https://satcoach.ai/.well-known/api-catalog
- Human guide: https://satcoach.ai/agents
- Summary for LLMs: https://satcoach.ai/llms.txt
- Contact: hello@satcoach.ai