# Auth.md

## Authentication at floxis.tech

Floxis is server-side ad infrastructure operated by Ad Tech Company OÜ (Estonia).
This file tells automated clients what does and does not require credentials here.

## Nothing on this site requires authentication

`floxis.tech` is an entirely public marketing and documentation site. There is no
login, no session, and no credential of any kind needed to read any page. Agents
should not look for a sign-in flow on this host.

Crawl policy is declared in [`/robots.txt`](https://floxis.tech/robots.txt),
including machine-readable Content Signals. A condensed, agent-oriented summary of
the site is at [`/llms.txt`](https://floxis.tech/llms.txt).

## Public data endpoints — unauthenticated, read-only

These are open to any client, no registration, no key, no rate-limit negotiation.
They are enumerated in machine-readable form at
[`/.well-known/api-catalog`](https://floxis.tech/.well-known/api-catalog) (RFC 9727).

| Endpoint | Format | Purpose |
| --- | --- | --- |
| `https://floxis.tech/sellers.json` | `application/json` | IAB Tech Lab sellers.json — authorized sellers and intermediaries |
| `https://floxis.tech/ads.txt` | `text/plain` | IAB Tech Lab ads.txt — authorized digital sellers |
| `https://floxis.tech/vendor-storage.json` | `application/json` | IAB TCF client-side storage disclosure |

## The authenticated surface is not self-service

Floxis operates a separate management dashboard for contracted publishers and
demand partners. It is **not** reachable from this host and it is **not** open to
public registration:

- Accounts are provisioned by Floxis as part of a commercial agreement.
- There is no public credential issuance, no API-key self-signup, and no OAuth
  authorization server offered to third parties.
- Consequently this site publishes **no** OAuth discovery metadata
  (RFC 8414 / RFC 9728). Their absence is deliberate, not an oversight — there is
  no authorization server behind them to discover.

An agent acting for a prospective customer should not attempt to register. The
correct action is to route the human to <https://floxis.tech/contact>.

## Contact

- Commercial and access requests: <https://floxis.tech/contact>
- Technical: `dev@floxis.tech`
- Security: [`/.well-known/security.txt`](https://floxis.tech/.well-known/security.txt)

_Last reviewed: 2026-08-07._