# Gobierno Autónomo Municipal de El Alto auth.md

Documentación oficial de autorización e integración para agentes de Inteligencia Artificial en el portal del Gobierno Autónomo Municipal de El Alto (GAMEA).

## Resource Identification
- **Resource Identifier**: https://elalto.gob.bo
- **Authorization Server**: https://elalto.gob.bo
- **OAuth Discovery**: https://elalto.gob.bo/.well-known/oauth-authorization-server
- **Protected Resource Metadata**: https://elalto.gob.bo/.well-known/oauth-protected-resource

## Registration and Authentication Methods

### 1. Anonymous Access (Read-Only)
Public discovery documents, service catalogs, agent skills, and public API metadata are accessible without authentication using standard HTTP GET requests.
- Identity Type: anonymous
- Headers: None required for public endpoints.

### 2. OAuth 2.0 / MCP Agent Access (ID-JAG)
For interacting with protected abilities, Model Context Protocol (MCP) endpoints, and automated workflows:
- **Registration Endpoint**: https://elalto.gob.bo/wp-json/novamira/v1/oauth/register
- **Token Endpoint**: https://elalto.gob.bo/wp-json/novamira/v1/oauth/token
- **Grant Types Supported**: authorization_code, refresh_token, urn:ietf:params:oauth:grant-type:jwt-bearer, urn:ietf:params:oauth:grant-type:device_code
- **Code Challenge Methods**: S256
- **Bearer Methods**: header (e.g. Authorization: Bearer <access_token>)
- **Supported Scopes**: read, write, mcp

## Contact for Developer & Agent Credentials
To request high-volume agent access or dedicated API credentials, contact:
- **Developer Portal**: https://elalto.gob.bo/contactos/
- **Email**: info@elalto.gob.bo
