# JobFinder public API authentication

JobFinder's public REST API and MCP server are read-only and require no account, API key, bearer token, cookie, OAuth grant, or other credential. An agent can make its first request immediately.

## Discover

- REST API index: https://www.jobfinder-ai.com/api/v1
- OpenAPI 3.1 contract: https://www.jobfinder-ai.com/openapi.json
- MCP server: https://www.jobfinder-ai.com/mcp
- Developer guide: https://www.jobfinder-ai.com/developers

## Pick a method

No authentication method is needed for these public surfaces. Do not send user credentials or invent an Authorization header.

## Register

Registration is not applicable. The public service does not issue client identifiers, API keys, or agent credentials.

## Claim

Credential claiming is not applicable. There is no agent_auth, register_uri, identity_assertion, or id-jag flow for the read-only public service.

## Use the public service

Request current jobs directly:

```sh
curl "https://www.jobfinder-ai.com/api/v1/jobs?limit=20"
```

The API returns JSON and uses opaque cursors for pagination. MCP clients can connect to https://www.jobfinder-ai.com/mcp and call the published read-only tools.

## Errors

Invalid parameters return a typed JSON 400 response. Unknown REST routes return a typed JSON 404 response. Unsupported methods return 405. Because no credential is required, the public service does not advertise a WWW-Authenticate challenge.

## Revocation

There is no public API credential to revoke. Stop making requests when access is no longer needed.

## Private product boundary

Connecting an inbox, preparing applications, approving outreach, and other account actions happen only in the signed-in product at https://app.jobfinder-ai.com. They are not exposed by the public REST API or MCP server, and agents must not claim those actions occurred unless the user completed and approved them there.