# Traddal auth.md

> How AI agents and integrations authenticate with the Traddal REST API: OAuth 2 client credentials.

## Getting credentials

API clients come with a Traddal workspace. Agents can't create them and there is no anonymous registration: ask the person you act for, or contact info@traddal.com.

## Getting a token

`POST https://api.traddal.com/oauth/token`, form-encoded, with `grant_type=client_credentials`, `client_id` and `client_secret`.

Send the token as `Authorization: Bearer <access_token>` on every call to `https://api.traddal.com/v1/…`.

## Without credentials

`GET https://api.traddal.com/health` and `GET https://api.traddal.com/openapi.json` are public. The free tools on https://traddal.com/tools need no account.

## MCP

Traddal has no public MCP server yet. In a browser that supports WebMCP, pages on https://traddal.com offer tools to in-page agents.