Bobcorn Auth Docs
Bobcorn public website metadata endpoints require no authentication. There are no API keys, OAuth scopes, user accounts, session cookies, or token refresh flows for these endpoints.
Current Access Rules
/release.json,/changelog.json,/openapi.json, and agent discovery files are public and read-only.- Local Bobcorn project files stay on the user's machine. Agents need local filesystem permission to inspect or modify `.icp` files.
- Bobcorn does not currently provide hosted workspaces, account APIs, OAuth, or SSO.
Machine-readable version: /api/auth.json.