Lucis.life auth docs

How agents authenticate against lucis.life public endpoints.

Discover

Read RFC 8414 metadata at /.well-known/oauth-authorization-server and RFC 9728 metadata at /.well-known/oauth-protected-resource. The catalog GET does not require a token.

Claim an optional token

POST grant_type=client_credentials and scope=catalog.read to /oauth/token. Public clients send no client secret. token_endpoint_auth_methods_supported is none.

Use the credential

Send Authorization: Bearer <token> if you have one. The catalog GET also works without a token. On HTTP 429, read RateLimit, RateLimit-Policy, and Retry-After.

Errors

Catalog errors use application/problem+json (RFC 9457). Token errors follow RFC 6749. Tokens last 3600 seconds. There is no revocation endpoint: wait for expiry.

Lucis.life OAuth 2.0 authorization server metadata
RFC 8414 document at /.well-known/oauth-authorization-server. Token endpoint: POST /oauth/token (client_credentials).
Lucis.life OpenAPI spec (openapi.json)
OpenAPI 3.1 description of the Lucis public catalog, OAuth token endpoint, RFC 9457 errors, and rate-limit headers.
All lucis.life developer resources
Call lucis.life from an agent using the Lucis.life OpenAPI spec, Lucis.life auth docs, llms.txt, markdown pages, and the public biomarker catalog. Lucis does not publish a member API. Lucis.life webhooks and MCP are not offered; poll the catalog GET.

Lucis does not replace medical advice. Our content is educational. If in doubt, speak with a healthcare professional.