# AgentReady API access

Public report and domain GET endpoints do not require authentication. Account endpoints use a secure HttpOnly session cookie after registration or login on https://agentready.ir. Mutating requests require the exact allowed Origin. There are no API keys or OAuth endpoints in this version. See /docs.